Appln.No. 10/622,982 



Attorney Docket No. 4366-124 



m THE UNITED STATES PATENT AND TRADEMARK OFFICE 



In re Patent Application for: 

Avaya Technology Corp. 

First Named Inventor: CHAN et al. 

Appln^No.: 10/622,982 

Filing Date: July 17, 2003 

For: "Method and Apparatus For Restriction of 
Message Distribution For Security" 

* * * 



MS Appeal Brief - Patents 
Commissioner for Patents 
P.O. Box 1450 
Alexandria, VA 22313-1450 

Sir: 



APPELLANTS^ BRIEF 
(37 CFR§4L37) 



Art Unit: 2155 

Examiner: Wang, Liangche 
Confirmation No.: 2989 



Appellants hereby appeal to the Board of Appeals in response to the Notice of 
Panel Decision from Pre- Appeal Brief Review of May 24, 2007. The fee set forth in 
37 CFR § 4L20(b) has been previously submitted in connection with the Request for 
Pre- Appeal Brief Request for Review. Although Appellants believe that no additional 
fees are due at this time, authorization to charge any necessary fees to Deposit 
Account No. 19-1970 is hereby given. 

A single copy of this Appeal Brief is being submitted pursuant to MPEP § 
1205.02. 



Appln.No. 10/622,982 Attorney Docket No. 4366-124 

(I) REAL PARTY IN INTEREST 
All right, title, and interest in this application has been assigned by the 
inventors, Kevin Chan, Neil Hepworth, and Stephane C. Laveau, to Avaya 
Technology Corp. This Assignment is recorded at Reel/Frame 014306/0146. 

(II) RELATED APPEALS AND INTERFERENCES 
There are no related appeals, interferences or judicial proceedings known to 
Appellants, or the Appellants' legal representative which may be related to, directly 
affect, be directly affected by, or have a bearing on the Board's decision in the 
pending appeal. 

(Ill) STATUS OF CLAIMS 
Claims 1-49 are pending in the application. Claims 32-35 have been 
withdrawn from consideration. Accordingly, Claims 1-31 and 36-49 are being 
appealed. 

Claims 1, 3, 5-8, 10-11, 13-17, 19, 21-24, 26-27, 29-31, 36, 37, 39, 41-44, 46- 
47, and 49 stand rejected under 35 U.S.C.§ 102(e). 

Claims 2, 4, 9, 12, 18, 20, 25, 28, 38, 40, 45, and 48 stand rejected under 35 
U.S.C.§103(a). 

The Claims at issue (/.e,, Claims 1-31 and 36-49) are set forth in the CLAIMS 
APPENDIX. 
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(IV) STATUS OF AMENDMENTS 
An amendment was filed on April 4, 2007, subsequent to the Examiner's Final 
Office Action dated February 6, 2007. That amendment was denied entry by the 
Examiner in an Advisory Action dated April 18, 2007. 

(V) SUMMARY OF CLAIMED SUBJECT MATTER 

The currently pending Independent Claims 1,16, and 36, recited in the Claims 
Appendix hereto, are directed to methods and a server for processing an electronic 
message (See Specification page 1, lines 5-7; page 4, lines 4-5; page 5, lines 7-8; and 
Fig. 1, elements 14a and 14b). 

One embodiment, which is the subject of Independent Claim 1, is directed to a 
method for processing an electronic message, comprising: 

receiving a message from a sender (See Specification page 4, line 6; page 20, 
lines 22-23; and Fig. 5, step 404), the message comprising (I) at least one recipient to 
receive the message (See Specification page 4, line 6; page 12, lines 16-20; and Fig. 4, 
step 308) and including at least one of (a) a restriction identifier, the restriction 
identifier identifying a subset of recipients from among a set of possible recipients 
(See Specification page 4, lines 7-8; page 12 and line 22 through page 13, line 13) and 
(b) an access restriction indicating a subset of points of access from ahiong a set of 
points of access to access the message (See Specification page 3, line 23 through page 
4, line 2; page 14, lines 9-13; and Fig. 6, step 504); 

determining whether each identified at least one recipient is within the subset 
of recipients corresponding to the restriction identifier (See Specification page 4, lines 
940; page 14, lines 1-2; and Fig. 5, step 412); and wherein at least one of the 
following steps is performed: 
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(i) when the message comprises the restriction identifier and an 
identified at least one recipient is not within the subset of recipients, at least one of 
(A) not providing access to the message to the identified at least one recipient who is 
not in the subset of recipients {See Specification page 4, lines 11-13; page 14, lines 2- 
3; and Fig. 5, step 412) and (B) notifying the sender that an identified at least one 
recipient is not within the subset of recipients {See Specification page 4, lines 13-14; 
page 14, lines 3-4; and Fig. 5, step 420); and 

(ii) when the message comprises the access restriction and an 
identified at least one recipient attempts to access the message from a point of access 
not within the subset of points of access, not providing access to the message to the 
identified at least one recipient whose point of access is not within the subset of points 
of access {See Specification page 14, lines 16-17 and Fig. 6, step 516). [Bold 
identifiers added] 

A related embodiment, which is the subject of Independent Claim 16, is 
directed toward a method for processing an electronic message, comprising: 

receiving at least part of a message inputted by a user {See Specification page 
4, line 6; page 13, lines 22-23; and Fig. 5, step 404), the at least part of a message 
comprising at least one recipient to receive the message {See Specification page 5, 
lines 9-10; page 12, lines 16-20; and Fig. 4, step 308); 

receiving, from the user, a restriction identifier for the at least part of a 
message, the restriction identifier identifying a subset of recipients from among a set 
of possible recipients {See Specification page 5, lines 1 1-13; page 12, line 22 through 
page 13, line 13); and 
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when a restriction identifier is received, tagging the message with the 
restriction identifier {See Specification page 5, lines 14-15; page 10, lines 18-23, and 
Fig. 4, step 320). 

Another embodiment, which is the subject of Independent Claim 36, is 
directed toward a server for processing an electronic message, comprising: 

an input operable to receive at least part of a message inputted by a user {See 
Specification page 4, line 6; page 13, lines 22-23; and Fig. 5, step 404), the at least 
part of a message comprising at least one recipient to receive the message {See 
Specification page 5, lines 9-10; page 12, lines 16-20; and Fig. 4, step 308), and a 
restriction identifier for the at least part of a message, the restriction identifier 
identifying a subset of recipients from among a set of possible recipients {See 
Specification page 5, lines 1 1-13; page 12, line 22 through page 13, line 13); and 

when a restriction identifier is received, a processor operable to tag the 
message with the restriction identifier {See Specification page 5, lines 1 1-13; page 12, 
line 22 through page 13, line 13). 

(VI) GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL 
Whether Claims 1, 3, 5-8, 10-11, 13-17, 19, 21-24, 26-27, 29-31, 36, 37, 39, 

41-44, 46-47, and 49 are anticipated under 35 U.S.C.§102(e) by U.S. Patent No. 

6,480,885 [hereinafter "Olivier"]. 

Whether Claims 2, 4, 18, 20, 38, and 40 are unpatentable under 35 

U.S.C.§103(a) over Olivier in view of U.S. Patent Application No. 2003/0065727A1 

[hereinafter "Clarke"]. 

Whether Claims 9, 25, and 45 are unpatentable under 35 U.S.C.§ 103(a) over 

Olivier in view of U.S. Patent No. 6,654,779 [hereinafter "Tsuei"]. 



Appln. No. 10/622,982 Attorney Docket No. 4366-124 

Whether Claims 12, 28, and 48 are unpatentable under 35 U.S.C.§103(a) over 
Olivier in view of U.S. Patent No. 5,619,648 [hereinafter "Canale"]. 



(VII) ARGUMENT 
1. Rejection of Claims 12, 28, and 48 under 35 U.S.C.§103(a) over Olivier in 
view of Canale 

The Office argues that Olivier in combination with Canale teaches a method 
and server for processing electronic messages, wherein the message comprises a 
forwarding restriction indicating (a) whether the message may be forwarded and/or 
(b) to whom the message may be forwarded, and therefore, Claims 12, 28, and 48 of 
the instant application are obvious over Olivier in view of Canale. 

In order for a rejection under 35 U.S.C.§103(a) to be proper, there must be 
some suggestion or motivation to modify the reference or to combine the reference 
teachings, there must be a reasonable expectation of success, and the prior art 
reference or references must teach or suggest all of the claim limitations. In re Vaeck, 
947 F.2d 488 (Fed. Cir. 1991). 

Appellants respectfully disagree with the Examiner's position that Olivier and 
Canale teach all of the claim limitations of Claims 12, 28, and 48. 

The Office concedes that Olivier does not teach a forwarding restriction 
indicating (a) whether the message may be forwarded and/or (b) to whom the message 
may be forwarded. Instead, the Office asserts that Col. 3, line 54 through Col. 4, line 
8 of Canale teach a forwarding restriction indicating to whom the message may be 
forwarded. 

The relied upon portion of Canale recites: 

If user model 113 does not specify a recipient which is of the same 
kind specified by recipient description 125, mail filter 109 looks to 
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correspondent models 111 to determine where to send mail item 119. 
There is a correspondent model lll(m) for each of user 105(n)'s 
frequent correspondents, and like user model 113, each correspondent 
model lll(m) contains data which mail filter 109 can use together 
with recipient description 125 to determine which of user 105(n)'s 
correspondents should receive mail item 1 19. Mail filter 109 then adds 
the names and e-mail addresses of those correspondents to referral list 
127 in mail item 119 and forwards mail item 119 to those 
correspondents. If they in turn have mail filters 109, they will also 
filter mail item 119 as just described. In a preferred embodiment, user 
105(n) may specify how much control he desires over forwarding. 
Forwarding may be completely automatic, or mail filter 109 may 
present user 105(n) with the information from recipient description 
125 and a list of the correspondents it has found for forwarding and let 
user 105(n) select which of the correspondents is to receive the 
forwarded letter. (Canale, Col. 3, line 56 through Col. 4, line 8) 

Appellants believe this interpretation of Canale is improper and out of the 

context of the teachings of Canale. The cited portion of Canale describes the 

operation of a mail filter 109 that positively identifies users that are to receive a 

forwarded message based on the receiving user's preference (which is not restricted) 

and correspondent models 1 1 1 maintained by the user. This particular passage of 

Canale teaches that a user may control the forwarding options of his/her mail filter 

109. The user that receives the message is given the freedom to select correspondents 

that are to receive the message without any sort of restriction. Each recipient of the 

mail item 1 19 is allowed to forward the mail item 1 19 on to other users without 

restriction. 

In Canale, while a recipient specifier is discussed, it does not restrict access to 
a communication in a manner similar to that claimed, but is rather used by a mail 
filter at the "recipient" to determine whether the recipient desires to receive the 
message. 

This teaches away from the subject matter claimed in Claims 12, 28, and 48, 
since those claims require receiving a message that comprises a forwarding restriction 
that impacts negatively what users can access or receive a forwarded message. A 
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message with such a restriction identifier allows a sender to control the distribution of 
his/her message even after the message has been sent as disclosed in an exemplary 
embodiment discussed at page 5, line 18 through page 6, line 13 of the application as 
filed. The mail filter 109 of Canale only teaches positively identifying users that 
should receive a message. There is no teaching, suggestion, or motivation to have a 
message that comprises a forwarding restriction indicating (a) whether the message 
may be forwarded and/or (b) to whom the message may be forwarded, and therefore, 
Claims 12, 28, and 48 of the instant application are not obvious over Olivier in view 
of Canale and should therefore be allowed. 

2. Rejection of Claims under 35 U.S.C.S 102(e) over Olivier 

The Office argues that Olivier teaches the method and server for processing 
electronic messages using a restriction identifier and/or access restriction, and 
therefore. Claims 1, 3, 5-8, 10-11, 13-17, 19, 21-24, 26-27, 29-31, 36, 37, 39, 41-44, 
46-47, and 49 of the instant application are anticipated by Olivier. 

Appellants disagree with the Office's interpretation of Olivier and submit that 
Olivier teach, suggest, or describe all of the claim elements and therefore does not 
anticipate the pending claims. 

2A. Legal Standard of Review 

An invention may receive a patent only if it is novel in relation to prior art 
described in an application for patent filed or patent granted by another. 35 U.S.C. § 
102(e). 

A prior art reference renders an invention anticipated if it "discloses every 
feature of the claimed invention, either explicitly or inherently." Hazani v. United 



Appln. No. 10/622,982 Attorney Docket No. 4366-124 

States ITC, 126 F.3d 1473, 1477 (Fed. Cir. 1997); see also Schering Corp. v. Geneva 
Phamis., Inc., 339 F.3d 1373, 1379 (Fed. Cir. 2003). 



2B. What the Prior Art Teaches -- the Plain Language of Olivier 
Olivier is directed to a method for enabling users to exchange group electronic 
mail by establishing individual profiles and criteria, for detennining personalized 
subsets within a group. Users establish subscriptions to an electronic mailing list by 
specifying user profile data and acceptance criteria data to screen other users. When 
a user subscribes, a web server establishes and stores an individualized recipient list 
including each matching subscriber and their degree of one-way or mutual match with 
the user. When the user then sends a message to the mailing list, an email server 
retrieves 100% her matches and then optionally filters her recipient list down to a 
message distribution list using each recipient's message criteria. The message is then 
distributed to matching users. The user may specify acceptance criteria in the 
matching algorithm. The matching algorithm may be facilitated by including, in the 
email body or subject line, a keyword in brackets such as "[for sale]", (emphasis 
added) 

Additionally, email archives and information contributions from users are 
stored in a database. A web server creates an individualized set of web pages for a 
user from the database, containing contributions only from users in his recipient list. 
In other embodiments, users apply one-way or mutual criteria matching and message 
profile criteria to other group forums, such as web-based discussion boards, chat, 
online clubs, USENET newsgroups, voicemail, instant messaging, web browsing side 
channel communities, and online gaming rendezvous. 

The user can exclude particular subscribers and subjects from his interactions. 
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The user can override subscription settings when sending a message. The 
subscription settings are treated as "default settings", and the user can override any of 
the settings when sending a message. The user could specify this through additional 
codes in his email message body, or by using a web forni when sending the message. 
The web form would include access to override those settings. The subscription 
matching process described in FIG. 5B and its related text are used to determine the 
distribution list for the present message being sent. The settings are not stored as the 
user's permanent settings. An example use is in a neighborhood mailing list for a user 
to send out a "for sale" message to neighbors within 10 miles of him, overriding his 
usual acceptance criteria data of neighbors within 3 miles of him. This feature would 
have to exist in conjunction with the previous feature, controlling delivery of reply 
email messages, so that recipients can answer to the same group. 

The system of Olivier is applicable to voice mail. 

2C. The Rejection of Claim 1 is Improper as Olivier does not teach, 
suggest, or describe everv claim element of Claim 1 

It is the Office's position that Olivier teaches the use of a restriction identifier 
and/or an access restriction. More specifically, with respect to the restriction 
identifier, the Office asserts that Olivier teaches a message that (I) identifies a 
recipient and (a) includes a restricting identifier identifying a subset of recipients from 
among a set of possible recipients, and then (i) when the identified recipient is not 
within the subset of recipients continues by (A) not providing the identified recipient 
access to the message and/or (B) notifying the sender that the identified recipient is 
not within the subset of recipients. 
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With respect to the access restriction, the Office asserts that Olivier teaches a 
message that (I) identifies a recipient and includes (b) an access restriction indicating 
a subset of points of access from among a set of points of access to access the 
message, and then (ii) when the identified at least one recipient attempts to access the 
message from a point of access not within the subset of points of access, not providing 
access to the message to the identified at least one recipient whose point of access is 
not within the subset of points of access. 

In support of this position, the Office asserts that Olivier teaches the above 
noted features at Col. 3, lines 17-22 and Col. 5, lines 17-65. Appellants respectfully 
disagree with the Office's assertion that Olivier teaches each and every element of the 
Independent Claim 1. 

The restriction identifier of the present invention can: (i) be a forwarding 
restriction indicating one or both of whether or not the message may be forwarded and 
to whom the message may be forwarded; (ii) be an access restriction indicating that 
the message may be accessed only from predetermined points of access, such as 
points of access internal to a network; and/or (iii) refer to other conditions besides 
class of eligible recipients. The restriction identifier impacts negatively what users 
can access a particular message or even the way that a user is allowed to access a 
message. Creating restriction identifiers allows a sender to control the distribution of 
his/her message even after the message has been sent. 

In contrast, it is abundantly clear that in Olivier, it is the end user (i.e. the 
recipient) that is specifying the acceptance criteria data - not the sender as set forth in 
Independent Claims 1 . Moreover, Olivier does not teach any situation where an 
identified recipient is not within the subset of recipients. At most, the acceptance 
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criteria discussed in Olivier creates a subset of recipients from among a set of possible 
recipients. 

Nowhere in Olivier is there a teaching of identifying a recipient that may or 
may not be a part of a subset of recipients from among a set of possible recipients. 

Regarding the access restriction feature and any claim interpretations (e.g., 
(I)(b)(i) and/or (I)(b)(ii)) including such a feature, the Office states that the use of 
restriction identifiers to prevent access of electronic mail from a set of communication 
devices otherwise associated with a recipient is disclosed at Fig. 9, col. 3, lines 17-22, 
col. .5, lines 47-49, and col. 12, lines 59-65 of Olivier. Contrarily, Olivier makes clear 
that a "recipient" refers to a person or subscriber and not a device. There are no 
restrictions for a subset of devices, each of which may be associated with the same 
recipient. Thus, Olivier teaches that a matching subscriber is forwarded the email, 
even if not addressed specifically to the subscriber. Olivier does not distinguish 
between which of the matching subscriber's devices receives the email let alone 
specify that the matching subscriber cannot access the message at some of that 
subscriber's message retrieval nodes. 

2D. The Rejection of Claims 16 and 36 is Improper as Olivier does not 
teach, suggest, or describe every claim element of Claims 16 and 36 

In addition to the proffered arguments, and with respect to Independent Claims 
16 and 36, Olivier fails to teach, suggest, or describe tagging a message with a 
restriction identifier that will negatively restrict access to that message. 

The Office asserts that Col. 12, lines 59-66 of Olivier describe tagging a 
message with a restriction identifier when a restriction identifier is received from a 
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user. Appellants respectfully disagree with the Office's assertion that Olivier teaches 
tagging a message with a restriction identifier. 

The relied upon portion of Olivier teaches embedding data into a message 
from an unknown user. Embedded within the message is the user's profile and 
acceptance criteria data. As discussed above, the acceptance criteria data described in 
Olivier positively identifies recipients by comparing the acceptance criteria with all 
other users' profiles. A user's profile that matches the acceptance criteria of the 
message will be included in the users that receive the message. The recipients of the 
message are not restricted based on the embedded acceptance criteria but are instead 
positively identified and provided with the message. 

This is an explicit teaching away from a restriction identifier that impacts 
negatively which users are allowed to receive a message. 

2E. The Rejection of Claims 8. 17. 24, 37, and 44 is Improper as 
Olivier does not teach, suggest or describe every claim element of Claims 8, 17, 24, 
37. and 44 

As noted above, Olivier fails to teach, suggest, or describe a message that 
comprises a restriction identifier and when an identified recipient (as identified in the 
message) is not within a subset of recipients (as identified by the restriction 
identifier), not providing the identified recipient access to the message even though 
the identified recipient was listed as a recipient in the message as is recited in Claims 
8, 17, 24,37, and 44. 

The Office asserts that Col. 3, lines 17-22 and Col. 5, lines 47-49 of Olivier 
describe not providing the identified recipient access to a message even when the 
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identified recipient was listed as a recipient in the message. Appellants respectfully 
disagree with the Office's assertion that Olivier teaches such a feature. 

The relied upon portion of Olivier teaches the ability of users to exchange high 
quahty messages with other matching users thus resulting in the creation of sub- 
groups within the mailing list. This is not the same as receiving a message that has an 
identified recipient and a restriction identifier that ultimately restricts that identified 
recipient from obtaining access to the message. The restriction identifier of this 
particular embodiment is provided to ensure that a sending user does not accidentally 
send a message to an individual that has been identified as restricted from receiving a 
message, not to help expedite the exchange of messages within particular user sub- 
groups. 

2F. The Rejection of Claims 10, 26. and 46 is Improper as Olivier does 
not teach, suggest, or describe every claim element of Claims 10, 26, and 46 

It is the Office's position that Olivier teaches a message that comprises an age 
restriction that specifies an age limit of the message. The Office relies upon Col. 14, 
lines 23-28 of Olivier where a subscription expiration date is discussed. Appellants 
respectfiilly disagree with the Office's assertion that a subscription expiration date is a 
fimctional equivalent or even inherently similar to an age restriction recited in Claim 
10, 26, and 46. While the age restriction of the present invention is associated with 
the message and may be used to specify an age limit of the message, the subscription 
expiration date described in Olivier is associated with a user's profile and has no 
connection with a message. 
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2G. The Rejection of Claims 1 L 27, and 47 is Improper as Olivier does 
not teach, suggest or describe every claim element of Claims 1 L 27, and 47 

It is the Office's position that Olivier teaches a message that comprises a 
timestamp indicating v^hen a life of a message starts and comparing the expired life of 
the message with an age restriction to determine whether a message should be deleted 
and/or delivered. The Office relies upon Col. 14, lines 23-28 and Col. 18, lines 54-64 
of Olivier where a subscription expiration is discussed as well as cleanup operations 
of a database server. Olivier teaches that during database maintenance messages 
older than n days may be transferred to a secondary database server or secondary 
computer systems to reclaim disk space. Appellants respectfully submit that this is 
not disclosure to anticipate the use of a timestamp to determine whether a message 
should be deleted and/or delivered. As noted above, the subscription expiration date 
of Olivier is associated with a user profile whereas the age restriction of the present 
invention is associated with a message. 

2H. The Rejection of Claims 13. 29, and 49 is Improper as Olivier does 
not teach, suggest, or describe every claim element of Claims 13. 29, and 49 

As noted above, Olivier fails to teach, suggest, or describe a message that 
comprises an access restriction. It is clear from the teaching of Olivier that a 
"recipient" refers to a person or subscriber and not a device. There are no restrictions 
for a subset of devices, each of which may be associated with the same recipient. The 
user of an access restriction helps to ensure that certain messages do not leave a 
particular premises or are not accessed by a restricted device. A particular user may 
be able to access a certain message from a communication device within an allowable 
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set of devices but may not be able to access the same message from a device that is 
restricted by the access restriction. 

Nowhere in Olivier is there a discussion of limiting access to a message based 
on the device that is used to retrieve the message as recited in Claims 13, 29, and 49. 

3. Rejection of Claims 9, 25. and 45 under 35 U.S.C.§103ra) over Olivier in 
view of Tsuei 

The Office argues that Olivier in combination with Tsuei teaches a method 
and server for processing electronic messages, wherein the message comprises a 
restriction identifier and when an identified recipient (as identified in the message) is 
not within the subset of recipients (as identified by the restriction identifier), the 
sender is notified that the identified recipient is not within the subset of recipients, and 
therefore, Claims 9, 25, and 45 of the instant application are obvious over Olivier in 
view of Tsuei. 

As noted above in section 2E the relied upon portion of Olivier teaches the 
ability of users to exchange high quality messages with other matching users thus 
resulting in the creation of sub-groups within the mailing list. This is differs from 
receiving a message that has an identified recipient and a restriction identifier that is 
designed to restrict that identified recipient from obtaining access to the message. 
The restriction identifier of this particular embodiment is provided to ensure that a 
sending user does not accidentally send a message to an individual that has been 
identified as restricted from receiving a message, not to help expedite the exchange of 
messages within particular user sub-groups. If such an event occurs, the sending user 
can be notified that they are attempting or have attempted to send a message to a 
restricted recipient. 
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Tsuei does not overcome the shortcomings of Olivier. Rather, Tsuei is 
directed to a system and methods for managing Internet e-mail address changes, 
particularly useful for situations where subscribers change Internet service providers. 
A computer system manages a database of stored records correlating a first e-mail 
address of an intended recipient, e.g. an old e-mail address, to a second e-mail 
address, e.g. a new e-mail address of the intended recipient. A program module in the 
computer system is responsive to an Internet query for accessing the database to 
determine whether a second e-mail address of the intended recipient is stored in 
association with a first e-mail address. Another program module is operative for 
providing the second e-mail address as a response to the query. The query response is 
communicated to the sender or to the sender's ISP so that an undeliverable message 
can be resent to the new e-mail address. Also provided in Tsuei are security and 
authentication measures for ensuring that address change requests are valid and 
authentic. There is no teaching, suggestion, or description in Tsuei of notifying a 
sending user that they attempted or are attempting to send a message to a recipient 
that has been identified as restricted in the restriction identifier. Accordingly, 
Appellants submit that Claims 9, 25, and 45 are not obvious over Olivier in view of 
Tsuei. 
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For at least the reasons elaborated upon in this brief. Appellants submit that 
the rejection of the pending claims in view of Olivier and combinations of Olivier and 
other references, should be withdrawn as the Olivier disclosure does not teach all of 
the elements as claimed and the remaining references cited in combination with 
Olivier do not overcome the shortcomings of Olivier. 

Respectfiilly submitted, 
SHERIDAN ROSS P.C. 



Date: Uqfj 3,, PoQ?- 



Matthew R. Ellsworth 
Registration No. 56,345 
1560 Broadway, Suite 1200 
Denver, Colorado 80202-5141 
(303) 863-9700 
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(VIII) CLAIMS APPENDIX 

1 . A method for processing an electronic message, comprising: 
receiving a message from a sender, the message comprising at least one 

recipient to receive the message and including at least one of a restriction identifier, 
the restriction identifier identifying a subset of recipients from among a set of possible 
recipients and an access restriction indicating a subset of points of access from among 
a set of points of access to access the message; 

determining whether each identified at least one recipient is within the subset 
of recipients corresponding to the restriction identifier; and wherein at least one of the 
following steps is performed: 

(i) when the message comprises the restriction identifier and an 
identified at least one recipient is not within the subset of recipients, at least one of 
not providing access to the message to the identified at least one recipient who is not 
in the subset of recipients and notifying the sender that an identified at least one 
recipient is not within the subset of recipients; and 

(ii) when the message comprises the access restriction and an 
identified at least one recipient attempts to access the message from a point of access 
not within the subset of points of access, not providing access to the message to the 
identified at least one recipient whose point of access is not within the subset of points 
of access. 

2. The method of Claim 1, wherein the message comprises the restriction 
identifier and the restriction identifier is located in a header of the message. 
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3. The method of Claim 1, wherein the message comprises the restriction 
identifier and the restriction identifier is located in a body of the message. 

4. The method of Claim 1, wherein the message comprises the restriction 
identifier and the restriction identifier is located in a trailer of the message. 

5. The method of Claim 1, wherein the message comprises the restriction 
identifier and the restriction identifier is located in an attachment to the message. 

6. The method of Claim 1, wherein the message is received by a server 
associated with at least one recipient from a server associated with the sender. 

7. The method of Claim 1, wherein the at least one of the restriction 
identifier and an access identifier is configured as a flag. 

8. The method of Claim 1 , wherein the message comprises the restriction 
identifier and wherein, when an identified at least one recipient is not within the 
subset of recipients, the step of not providing access to the message to the identified at 
least one recipient who is not in the subset of recipients is performed. 

9. The method of Claim 1 , wherein the message comprises the restriction 
identifier and wherein, when an identified at least one recipient is not within the 
subset of recipients, the step of notifying the sender that an identified at least one 
recipient is not within the subset of recipients is performed. 
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10. The method of Claim 1, wherein the message comprises an age 
restriction, the age restriction specifying an age limit of the message. 



1 1 . The method of Claim 1 0, wherein the message comprises a timestamp 
indicating when a life of a message starts and further comprising: 

comparing the expired life of the message with the age restriction to detennine 
whether or not to delete and/or deliver the message to the at least one recipient, 

12. The method of Claim 1, wherein the message comprises a forwarding 
restriction indicating at least one of (a) whether the message may be forwarded and 
(b) to whom the message may be forwarded. 

13. The method of Claim 1, wherein the message comprises the access 
restriction. 

14. A computer readable medium operable to perform the steps of Claim 1 . 

15. A logic circuit operable to perform the steps of Claim 1. 

16. A method for processing an electronic message, comprising: 
receiving at least part of a message inputted by a user, the at least part of a 

message comprising at least one recipient to receive the message; 

receiving, from the user, a restriction identifier for the at least part of a 
message, the restriction identifier identifying a subset of recipients from among a set 
of possible recipients ; and 
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when a restriction identifier is received, tagging the message with the 
restriction identifier. 



17. The method of Claim 16, wherein, before the message is sent to the at 
least one recipient, further comprising: 

detennining whether each identified at least one recipient is within the subset 
of recipients corresponding to the restriction identifier; and 

when an identified at least one recipient is not within the subset of recipients, 
at least one of not sending the message to the identified at least one recipient who is 
not in the subset of recipients and notifying the user that an identified at least one 
recipient is not within the subset of recipients. 

18. The method of Claim 16, wherein the restriction identifier is located in 
a header of the message. 

19. The method of Claim 16, wherein the restriction identifier is located in 
a body of the message. 

20. The method of Claim 16, wherein the restriction identifier is located in 
a trailer of the message. 

21. The method of Claim 16, wherein the restriction identifier is located in 
an attachment to the message. 
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22. The method of Claim 1 7, wherein the message is received by a server 
associated with at least one recipient from a server associated with the sender. 



23. The method of Claim 1 7, wherein the restriction identifier is 
configured as a flag. 

24. The method of Claim 1 7, wherein, when an identified at least one 
recipient is not within the subset of recipients, the step of not providing access to the 
message to the identified at least one recipient who is not in the subset of recipients is 
performed. 

25. The method of Claim 1 7, wherein, when an identified at least one 
recipient is not within the subset of recipients, the step of notifying the sender that an 
identified at least one recipient is not within the subset of recipients is performed. 

26. The method of Claim 1 7, wherein the message comprises an age 
restriction, the age restriction specifying an age limit of the message. 

27. The method of Claim 26, wherein the message comprises a timestamp 
indicating when a life of a message starts and further comprising: 

comparing the expired life of the message with the age restriction to determine 
whether or not to delete and/or deliver the message to the at least one recipient. 
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28. The method of Claim 1 7, wherein the message comprises a forwarding 
restriction indicating at least one of (a) whether the message may be forwarded and 
(b) to whom the message may be forwarded. 

29. The method of Claim 17, wherein the message comprises an access 
restriction indicating a subset of points of access from among a set of points of access 
to access the message, and further comprising: 

when an identified at least one recipient attempts to access the message from a 
point of access not within the subset of points of access, not providing access to the 
message to the identified at least one recipient whose point of access is not within the 
subset of points of access. 

30. A computer readable medium operable to perform the steps of Claim 

16. 

31. A logic circuit operable to perform the steps of Claim 1 6. 

36. A server for processing an electronic message, comprising: 
an input operable to receive at least part of a message inputted by a user, the at 
least part of a message comprising at least one recipient to receive the message, and a 
restriction identifier for the at least part of a message, the restriction identifier 
identifying a subset of recipients from among a set of possible recipients; and 
when a restriction identifier is received, a processor operable to tag the 
message with the restriction identifier. 
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37. The system of Claim 36, wherein, before the message is sent to the at 
least one recipient, the processor is further operable to detennine whether each 
identified at least one recipient is within the subset of recipients corresponding to the 
restriction identifier and, when an identified at least one recipient is not within the 
subset of recipients, at least one of not send the message to the identified at least one 
recipient who is not in the subset of recipients and notify the sender that an identified 
at least one recipient is not within the subset of recipients. 

38. The system of Claim 36, wherein the restriction identifier is located a 
header of the message. 

39. The system of Claim 36, wherein the restriction identifier is located in 
a body of the message. 

40. The system of Claim 36, wherein the restriction identifier is located in 
a trailer of the message. 

41 . The system of Claim 36, wherein the restriction identifier is located in 
an attachment to the message. 

42. The system of Claim 36, wherein the message is received by a server 
associated with at least one recipient from a server associated with the sender. 
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as a flag. 
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The system of Claim 36, wherein the restriction identifier is configured 



44. The system of Claim 36, wherein, when an identified at least one 
recipient is not within the subset of recipients, the function of not providing access to 
the message to the identified at least one recipient who is not in the subset of 
recipients is perfonned. 

45. The system of Claim 36, wherein, when an identified at least one 
recipient is not within the subset of recipients, the function of notifying the sender that 
an identified at least one recipient is not within the subset of recipients is performed. 

46. The system of Claim 36, wherein the message comprises an age 
restriction, the age restriction specifying an age limit of the message. 

47. The system of Claim 46, wherein the message comprises a timestamp 
indicating when a life of a message starts and the processor is further operable to 
compare the expired life of the message with the age restriction to determine whether 
or not to delete and/or deliver the message to the at least one recipient. 

48. The system of Claim 36, wherein the message comprises a forwarding 
restriction indicating at least one of (a) whether the message may be forwarded and 
(b) to whom the message may be forwarded. 
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49. The system of Claim 36, wherein the message comprises an access 
restriction indicating a subset of points of access from among a set of points of access 
to access the message, and wherein, before allowing access to the message by the at 
least one recipient, the processor is operable to determine point of access of the at 
least one recipient and, when the point of access of the at least one recipient is not 
within the subset of points of access, not allowing access to the message. 
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ABSTRACT 



A method for enabling users to exchange group electronic 
mail by establishing individual profiles and criteria, for 
determining personalized subsets within a group. Users 
establish subscriptions to an electronic mailing list by speci- 
fying user profile data and acceptance criteria data to screen 
other users. When a user subscribes, a web server establishes 
and stores an individualized recipient list including each 
matching subscriber and their degree of one-way or mutual 
match with the user. When the user then sends a message to 
the mailing list, an email server retrieves 100% her matches 
and then optionally fillers her recipient list down to a 
message distribution Hst using each recipient's message 
criteria„ The message is then distributed to matching users. 
Additionally, email archives and information contributions 
from users are stored in a database. A web server creates an 
individualized set of web pages for a user from the database, 
containing contributions only from users in his recipient list. 
In other embodiments, users apply one-way or mutual 
criteria matching and message profile criteria to other group 
forums, such as web-based discussion boards, chat, online 
clubs, USENET newsgroups, voicemail, instant messaging, 
web browsing side channel communities, and online gaming 
rendezvous. 

22 Claims, 15 Drawing Sheets 
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TO : NEIGHBORS@LOCAL2ME.COM 

FROM: YGREENEST@LOCAL2ME.COM (YOLANDA GREENEST) 
SUBJECT: FINDING A GOOD REMODELLING CONTRACTOR 
DATE: MAY 12, 1998 

HALL, 

LOOKING FOR A GREAT REMODELLER TO HELP US REDO 
OUR KITCHEN. DOES ANYONE HAVE A RECOMMENDATION? 

THANKS! 
-Y 
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DATE: MAY 12, 1998 

I REALLY LIKE FRANK VARNEY. HE'S AN EICHLER 
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FOR US. WE HAD CHECKED HIS REFS BEFOREHAND AND 
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CUSTOMERS. 

-WILL 

YOLANDA GREENEST WROTE: 

> HI ALL, 

> 

> LOOKING FOR A GREAT REMODELLER TO HELP US REDO 

> OUR KITCHEN. DOES ANYONE HAVE A RECOMMENDATION? 

> 

> THANKS! 
>-Y 
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DYNAMICALLY MATCHING USERS FOR may have a lot in common with those near them just inside 

GROUP COMMUNICATIONS BASED ON A city limits, but little in common with those across town., 

THRESHOLD DEGREE OF MATCHING OF Each user's needs are different and yet the current mailing 

SENDER AND RECIPIENT list systems are inflexible in allowing users to express their 

PREDETERMINED ACCEPTANCE 5 needs and wants via customization- 

CRITERIA Similarly, there is much work involved in forming a 

neighborhood mailing list. If someone in a particular neigh- 

REFERENCE TO RELATED APPLICATIONS borhood wants to communicate with neighbors, there are 

. . ^ . n * rnr-r/TTcnn/ many sleps he must take. Fifst he must Create a mailing list 

„Sn ?o^° 'vt'°"?'-" ^''"'."{f^^™ 10 Theo he may determioe the borders of the neighborhood, 

21589 filed Sep. 15, 1999 which claims priority provi- ^.^ problematic if it is unclear where the borders should 

siond patent apphcabon Ser. N^o. 60/100 387, fi^ng date ^.^^ ^^^^^^^ neighborhoods. And 

Sep. 15 1998 entitled'TElectronicMatch-MakingWitlunA ^^^^ ^^^^^^^ and evangelize the mailing Kst to 

Group Using Critena." This apphcaUon ako clamis pnonty ^^^^ subscribership. Since most neighborhoods do not have 

to provisional patent apphca ton Ser No 60m5,566 fihng- information distribution (such as a printed 

date Jan. 12 1999. enUUed Dynamic Malchmg™ of Users ^J^^^^,,^^^ ^ , 

For Group Commumcation" and provisional patent apphca- ^ ^' , , tr^ i . . ir * 

tion Ser. No. 60/143,947, filing date Jul 15, 1999, entitled To extend the example different people have different 

"Dynamic Matching^^ of Users For Group Communica- ^a^ts and needs even within geographically regional com- 

mumcation. In fig. 1, one person (A) may want to exchange 
email with others within a one-mile radius of him. A second 

BACKGROUND OF THE INVENTION person (B) may only want to exchange email with those/on 

his block. A third person (C) may want only to exchange 

1, Field of Invention email with folks in one direction from his house. However, 
This invention relates to electronic communication within there is currently no way for users to express these desires 

group forums, specifically a process for dynamically match- ^ to control heir participation in a mailing list, 

ing users for high quality interactions within a group forum There are countless meaningful acceptance criteria that 

by establishing individual user profile data and acceptance would benefit users. Consider a parenting mailing list. In 

criteria data for restricting interaction. general, once a mailing list is formed, it tends to develop its 

2. Discussion of Prior Art own scope of interest. In this example, the parenting List may 
Hiere are many systems that allow users and groups of develop a very strong trend of discussing infants and tod- 
users to interact with each other. Electronic forums such as dlers. This can be very limiting for a subscriber who wants 
electronic mail, voicemail, USENET newsgroups, web- t« ^^^^ teenagers ITiat subscriber must delete many 
based discussion boards, and online multi-player gaming unwanted messages and may simply unsubscnbe from the 
services all have such faciUties. But none of the systems 35 list in frustration. She may consider a search for a better hst, 
gives users individualized acceptance criteria parameters for or she may consider starting a separate maihng hst for 
locating high quality matches with other users. Each forum Parents of teenagers, but again the barrier to entry is high, 
is created with a particular subject or objective in mind, and Since the mailing hst system cannot leverage mformaUon 
beyond that all users must follow the boundaries of that about the ages of children each subscriber is mterested in, it 
forum. It is strictly a "take it or leave it" proposiUon to the ,q ^^""ot deliver to her just those messages about teenagers , 
user There is little opportunity for a user to personalize the In online gaming, such as "Yahoo! Games", users are able 
forum to meet his own needs. ^ rendezvous with other users to play multi-player games, 

With electronic mail, users must know the email such as the card game hearts" m service provider w^^ 
addresses of those they want to contact. Electronic mailing often divide the players into several forums based on ability, 
lists improved on this for group communication by redis^ 45 ^^^^ ^ beginner, intermediate and advanced. But it does, 
tributing each message sent to the hst^s email address out to ^^t allow users to specify other acceptance criteria data, 
aU subscribers. All users get all messages sent to the list. But such as personaUty, computer speed, or amount of "chat- 
there are problems^smaUer maihng Usts are hard to pro- style" conversation they want to engage m dunng a game, 
mote and popularize while larger Hsts are unwieldy, tending Thus users must either live with low quahty matches or 
to have many rules of use and/or a high message volume, 50 '^^'''^ ^""^ ^^'^^^"^ S^"^^' "'^^^^^I '".^ 
and a high intimidation factor. In short, users have no control search for the characteristics they want m the game. Agam 
over which users on a list they communicate with. An ^^e user's only choice is "take it or leave it." 
additional problem is not knowing how much email a A number of email based news and information services 
subscription will deliver to you. One subscription may bring such as InfoBeat provide customized messages to their 
only a few messages per month while another one fills a 55 subscribers, but the messages are only sent by the service 
user's mailbox with 50 or more messages in a single day, itself, not by other users. It is meant for automated infor- 

One common yet inflexible division within a topic is by "nation delivery, not interpersonal communication and inter- 
geographic region. Consider a hypothetical worldwide action. 

"jazz" mailing list: If a subscriber wants only to communi- Dating services and employee -employer matching ser- 

cate about jazz with people in New York City, he must create 60 vices use criteria and profile information to match people 

a separate maihng list, such as "nyc-jazz". For most users, together, but they use those results only for one-on-one 

the work involved in creating and managing a Hst is pro- communication,, hey have not used matching technology for 

hibitive. Some regional groups may develop their own jazz group communication in which each user has their own 

mailing lists, but such hsts are usually tough to advertise and personalized group 

promote. Regional lists are inflexible because they have 65 Although the discussion here has been principally of the 

pre-set borders, e„g., the borders of New York City. That list interaction provided by electronic mailing lisUs, other group 

will not meet the needs of users just outside city limits who forums such as USENET newsgroups, web-based discussion 
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message boards, ah online gaming rendezvous are allema- Users need a fluid, flexible, and expressive means of 

lives that exhibit similar problems. controlling their interactions with others. They need to be 

Thus, a method is needed for creating high quahty inter- able to drastically increase the qnaUty of communication, 

actions within electronic forms. ^hHe controlHng the quantity of it. This invention enables 

5 these users to customize their communications and interac- 

SUMMARY OF THE IlsfVENTION tions. 

- , Further objects and advantages of my invention will 

Briefly, a presendy preferred embodiment of the present ^^^^^^ ^ ^^^^^ ^ consideration of the drawings and 

invention is directed to a method for users to exchange group ensuing description, 
electronic mail by establishing individual profiles and cri- 

teria for determining personalized subsets within a group. DESCRIPTION OF DRAWINGS 
Users establish subscriptions to an electronic mailing list by 

specifying user profile data and acceptance criteria data to FIG. 1 is an example of neighborhood residents with 

screen other users. When a user subscribes, a web server different geographies of interest, 

establishes and stores an individualized recipient list includ- FIG. 2 is an overview of use of the present invention, 

ing each matching subscriber and their degree of one-way or pjQ an overview of the invention's system's 

mutual match with the user. database. 

When the user then 'sends a message to the mailing list, pjQ 33 describes the data flow to and from the system 

an email server retrieves her 100% matches and then option- servers 

ally filters her recipient ILsl down to a message distribution piQ ^ ^ , ^^r interface for subscribing to 

hst usmg each recipient s message criteria. Ine message is ^ niailin list 

then distributed to matching users. . " « 

, . ,M FIG. 5A IS a flowchart of the user subscnption process. 

Additionally, email archives and iniormation contnbu- . . , 

tions from users are stored in a database. A web server PIG, 5B is a flowchart depicUng the process for detcr- 

createsanindividuahzedsetofwebpagesforauserfromthe 25 subscnber matches. 

database, containing contributions only from users in his FIG. 6 is an alternative flowchart for determining sub- 
recipient list. In other embodiments, users apply one-way or scriber matches, 

mutual criteria matching and message profile criteria to piG. 7 is another alternative flowchart for determining 

other group forums, such as web-based discussion boards, subscriber matches. 

chat, online clubs, USENET newsgroups, voicemail, instant 30 pjQ § is an example of users sending email messages to 

messaging, web browsing side channel communities, and ^ mailing Hst. 

online gaming rendezvous. Pj^. ^-^^^ ^^^^p^^ unknown user sending an email 

OBJECTS AND ADVANTAGES message to a mailing list, including profile and criteria data. 

, , ^. J J . r *u FIG. 10(1) is a flowchart of the message distribution 
Accordmgly, several objects and advantages of the 35 ^,^^^3 ^j^^ij^jg ji^t subscribers, 

present mvention are: . FIG, 10(2) is a flowchart of the message distribution 

(a) Creates personalized tunable groups for users, using ^^^^^^ .j. subscribers. 

user profile data and acceptance criteria data they r^,^ . , . „ u . c.. 4 • 

specify This fimdamental novelty greatly empowers ^ P^^. 11 is an alternative flowchart of the message distn- 

and enriches the quality of their communications. ^ution process to mailmg hst subscribers. 

(b) Greatly reduces the quantity of electronic forums such FI^- 1^ is a flowchart of an alternative embodiment^ in 
as electronic mailing lists, by making possible a small which the user reads messages m a web-based discussion 
number very broad forums within which users can forum. 

create their own niches. For instance, a single jazz 
mailing list can serve the entire world. 

(c) Allows users to very easily create discussion niches of 
meaning to them. They may want to only email with A presently preferred embodiment of the present inven- 
other senior citizens, or only with those in their city. In tion uses exchange of electronic mail as its medium The 
the parenting example given earlier, each user could detailed description to follow will focus on an electronic 
specify the children's age range they would like to mailing list system in which subscribers specify acceptance 
discuss. The resulting maihng list is tuned to each criteria data for engagement and then benefit from the 
user's needs, and gives them a much higher quality of ensuing interaction. It will be clear to those skilled in the art 
interpersonal contact. that there are many alternative electronic forums in which 

(d) Provides a way for meaningful groups to form 55 the invention could be applied. These include, but are not 
automatically, such as neighborhoods. limited to, voicemail, instant messaging, videoconferencing, 

(e) Provides a way of filtering archived information online chat, web-based discussion boards, USENET, 
provided by subscribers into individuahzed archives. newsgroups, online gaming, online gaming rendezvous, and 
This includes email archives as well as other informa- unified messaging- 

tion such as recommended businesses and web sites., 60 Although the discussion here focuses on the internet 

Additional objects and advantages are to benefit society network for its preferred embodiment, obviously any auto- 

by creating and uniting a huge number of niche groups, and mated means for group communication may be used for the 

to meet a compelling and immediate user need to customize present invention, 

email list communications according to individual profiles. Overview of Use: 

By dynamically matching each user's profile data and accep- 65 Referring to FIG , 2, the numeral 200 generally refers to an 

tance criteria data to others, the system creates a customized overview of the use of the present invention. In block 202, 

group for each user, enabling groups to form automatically. a service provider using the invention initializes the system 



45 DESCRIPTION OF PREFERRED 

EMBODIMENTS OF INVENTION 



us 6,480,885 Bl 

for the first lime. The service provider initializes a database. The remainder of FIG. 2 details several alternative 

or a dedicated part of a database, on a database server embodiments of the invention that we will now describe, 

available to both an email server and a web server. Hiis is In an alternative embodiment, block 220 is replaced with 

done using a database system, including a schema, data, and block 238, The message is distributed to all users who are 

a Database Management System (DBMS). Ibe database 5 subscribers of the mailmg list, and each message indicates 

system is a product such as those from Oracle or Sybase. The degree of match between the sender ^nd receiver 

^ . f , . In yet another alternative embodiment, the message IS 

service provider sets up the email sender to receive and send ^^^^ ^ ^^^^ ^^^^^^ ^^^^^ calculation is 

email on tlie internet ^ done. In this embodiment, blocks 228 and 234 replace 

aUow subscribers access to the web site via the internet. The ^^^^^ ^12 and 216. In step 228 the system receives a 
database server, email server, and web server each contain a lo ^^^^^^ ^^^^ ^ ^^^^^ ^^^^ ^^^^^ 234 it calculates 

portion of the present mvention. In the preferred embodi- matches between users, and uses those results in blocks 

ment the servers are separate, but alternatively theu func- 220 and 238 in the manner previously discussed, 
tions could be combined into fewer servers or expanded to j^j g^j^j another alternative embodiment, the message 

more servers, received is from an unknown user, and contains user profile 

The service provider then creates one or more electronic 15 ^ata and acceptance criteria data encoded within the mes- 
mailing lists by adding mailing list records and related sage. Blocks 224 and 234 replace blocks 212 and 216. At 
records to tables in the database. This is accomplished using block 224, the system receives a communication from an 
a method provided by the database system. The service unknown user, including the message content, user profile 
provider also establishes acceptance criteria data parameters data, and acceptance criteria data. Then in block 234 it 
and user profile data parameters for each mailing list which 20 calculates the matches between users, and uses those results 
describe what acceptance criteria data and user profile data in blocks 220 and 238 in the manner previously discussed, 
is to be collected from the users. In another alternative embodiment, the system receives a 

At block 208, a user visits the web site and subscribes to message fi-om an unknown user before obtaining criteria and 
a mailing list, specifying user profile data and acceptance profile data firom other users. Blocks 242, 246, and 234 
criteria data that control with whom and about what topics 25 replace blocks 208, 212, and 216. At block 242, the system 
they wish to interact. Hie system stores this and other receives a communication from an unknown user, including 
subscription information in the database. At block 212, one the message content, user profile data, and acceptance 
or more servers calculate the degree of matches between the criteria data. In block 246 the system obtains acceptance 
user and every other user, by doing a one way or two-way criteria data and user profile data from a multiplicity of 
match between users, using their user profile data and 30 users. Then in block 234 it calculates the matches between 
acceptance criteria data. The results of these match calcu- users, including the unknown user who sent the message, 
lations are stored in a database table or other storage, and uses those results in blocks 220 and 238 in the manner 

At block 16 the system receives an emaO message from a previously discussed, 
known user addressed to an email address on la server the In another alternative embodiment, the system obtains 
service provider's server Note that while in this preferred 35 user profile data first, then receives a message from a 
embodiment we use an email message as the vehicle of a profiled user, and then obtains acceptance criteria data 
communication, any means of electronic or automated com- before calculating matches and sending the message., Blocks 
munication may be used in its place. This email address is 250, 254, 258, and 234 replace blocks 208, 212, and 216, At 
the address dedicated by the service provider as the email block 250, the system obtains user profile data about users 
address of the mailing list he subscribed to at block 208. At 40 via a web form presented to the users, an email message 
block 220 the system determines which mailing list sub- from the users, an inference engine, a search engine, or 
scribers within the list's subscriber base should receive the another source. The system stores this and other subscription 
email message, by finding in the database the results of the information in the database. At block 254 the system 
match calculations done in block 212. It then distributes the receives a message from a profiled user, i,e., a user who has 
email message across the internet lo the matching subscrib- 45 a known profile, The user sending the message will either 

transmit his acceptance criteria data with the message or he 
The end result of the process is that users exchange high will specify it with other profiled users at block 258, At 
quality messages with other matching users, and sub-groups block 258, the system obtains acceptance criteria data about 
form automatically within the mailing list, its profiled users by one or more of the methods described 

To sum up the functionality, consider the following 50 for block 250. In block 234 the system then calculates the 
example. Suppose a user Barry wants to send a message matches between users, including the profiled user who sent 
about a problem at his child's school, A school mailing list the message, and uses those results in blocks 220 and 238 in 
has been established in advance by a service provider the manner previously discussed. 

hosting the mailing Ust. Barry first signs up for the school Turning to FIG. 3A, numeral 300 generally refers to a 
mailing list, specifying his profile and criteria information, 55 description of the database schema and relationships 
including his location and his geography of interest. The between entities (Entity/Relationship diagram). The data- 
system then calculates matches between Banry and other base in this preferred embodiment is a collection of tables of 
people already on the mailing list based on their profiles and information, as is typically stored in a database product such 
criteria Barry then writes an email message and addresses as Oracle. In the diagram, relationships between tables are 
it to the email address for his local school mailing list, at the 60 shown with *V or 'n', as will be familiar to those skilled in 
service provider's email server, school@local2me,com. The the art, to indicate the relative number of related records 
email server receives the message and retrieves Barry's between each pair of tables. 

Match calculations from the database. This describes the In the description below, we refer to a database record's 

other subscribers he is matched with. His message is then (or table row's) unique ID, This is also commonly called 
sent out to users with whom Barry forms a 100% match, 65 "Row ID", "Record ID", "Object ID", or "OID" by those 
resulting in a satisfying interaction with a subset of users— - skilled in the art, and is simply a unique identifier for each 
all the right people. row in a table. 
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At block 302, the users table (also referred to as the "base ApplieSiglOjgColumn are only used Cor acceptance criteria 

user profile table") contains a collection of base user profile entries in the table. (Not used for user profile entries.) They 

data records. These are records that contain base information describe what user profile data the acceptance criteria data 

about a user, such as name and email address, separate from appHes to. Applies,3to,3table selects the database table of 

their subscriptions. Each record also contains a unique ID Jn 5 the profile data that the criteria applies to This could be 

this preferred embodiment, thei^ is only one base user either the subscnption table, the user table, or the email 

profile data record per user. Appbes 3to,3Column identifies the column of 

At block 306 the sub^riptions table contains one j^^^^^^^^ and acceptance critena data are closely 

for each subscnption entered. Each user can have multiple ^^^^^^^ K^^^ compares acceptance criteria data to 

subscription records, for mstance subscribed to a jazz mail- lo ^^^^ ^^^^ determine subscriber and message 

ing list and a neighborhood mailing list, The subscnption matches. A piece of profile data may describe a single data 

table contains the unique ID and unique username of the ^^-^^^^ ^^^^ geographical location, age, or occupation. The 

subscribing user. It also contains the name of the mailing list corresponding piece of acceptance criteria data may be a 

the subscription is for Another field allows the user to give ^.^^gg g^^h data points, such as a geographical area, age 

the subscription a descriptive name. ITie table also contains 15 range, or set of selected occupations,, 

subscription user profile data, which is profile information At block 320, the Matches Table keeps track of which 

about the given user specific to this subscription. This subscriptions are matched to each other. The matches table 

information is stored in integers and strings — 10 of each is used so that the time-consuming matching calculation can 

type of variable are allocated. Similariy, there are data fields be done only when needed, with the results stored in this 

for acceptance criteria data ("pcriteria") describing what this 20 table for quick access. Each row in the table keeps a relation 

user requires of other users, and message acceptance criteria between two matched subscribers. Two subscription unique 

data ("mcriteriia") describing what this user requires of ID's are stored in each row„ A union of searching each of the 

messages he receives. Note that we sometimes refer to two subscription unique ID columns for a given subscrip- 

message acceptance criteria simply as message criteria. The tion's unique ID yields the full set of matching subscriptions 

data in each of these profile and acceptance criteria fields 25 for the given subscription,, A third column stores the degree 

varies between mailing lists. The fields can be interpreted by of match between the two subscriptions. In the preferred 

examining the Subscription Template table, discussed embodiment, this degree of match calculation is a single 

below. number representing 0-100%. However, there are many 

The term "user profile" is used here and below to refer to methods of storing such calculations well known to those 

the combination of both a user's base user profile and the 30 skilled in the art. 

subscription user profile. Base user profile data is collected At block 322, the email archives table is an additional 

once when the user first registers at the service provider's feature to keep an archive of email messages previously 

web site. But the subscription user profile data is extra processed and distributed by the system. This will be used to 

profile information needed just for a particular mailing give users an estimate of email traffic when they are about 

list— it is collected when the user subscribes to a particular 35 to finalize a subscripUon process, and to allow users to 

list. The term "user profile acceptance criteria" refers to browse the archives via a web interface. A unique ID is 

acceptance criteria data related to both the base user profile available for each record. The sender's subscription unique 

and the subscription user profile. ID links a message to the sender. Msgjaprofileligint to 

At block 316 the mailing lists table contains a record for msgj3profilelO:i3int and the similar string profile fields store 

each mailing Ust in the system. The service provider, using 40 data describing the profile of the message (e„g., topic cat- 

an access method provided by the database system creates egory is ^recommendations'). These correlate to the message 

these records. Bach record contains a user-presentable name criteria optionally stored in subscription records. The email 

and an email address for the mailing list. message content is stored separately in the server's filesys- 

Block 318 refers to the Subscription Template table. This tem and its filepath is stored in the DB record, 

table defines the user profile data parameters and acceptance 45 Turning to FIG. 3B, the numeral 340 generally refers to 

criteria data parameter that describe the user profile data the flow of data between users, the email & web servers, and 

and acceptance criteria data needed from each user for each the database server. Block 342 represents a user interacting 

mailing list. These parameters act as templates for data to with the system via email and web protocols via a network, 

later be obtained and associated with users. This table also At block 344, the users interact via a network web protocol 

describes where the user profile data and acceptance criteria so 344 with a web server 346. The web server 346 is software 

data are stored in the subscription table, and what user and/or hardware for traditional web serving, plus a portion 

profile data each acceptance criterion refers to. Each row of the present invention for interacting with users via the 

correlates to one piece of user profile data or acceptance web, The web server 346 interacts with a database server 

criteria data. A unique ID is available for each record. L<isl 348, At block 352, the users 342 use a network email 

name is the name of the mailing list. Item name is the name 55 protocol to interact with an email server 354, Email server 

of the item. Category describes the type of template this is: 354 is software and hardware for traditional email handling, 

user profile, user profile acceptance criteria, message profile, plus a portion of the present invention for interacting with 

or message profile acceptance criteria. Data type describes users via email. The email server 354, like web server 346, 

the type of data being collected. The restrictions field has access to database server 348. After processing, email 

describes any restrictions for data entry (e,g„, a number 60 server 354 distributes each message out to via block 352 to 

between 1 and 10).. Prompt is a text string to use when multiple users 342. Note that email server 354, web server 

collecting user profile data or acceptance criteria data from 346, and database server 348 are three distinct computer 

the user. Storei3inj3Col describes what column in the sub- systems in this preferred embodiment, but could alternately 

scription table provides storage for this data when collected be combined into fewer computer system or split into more 

from the user. Store j3in3 3Col also describes what column in 65 computer systems.. 

the email messages table provides storage for this data when Referring to FIG. 4, the numeral 208 generally refers to a 

an email message is stored. ApplieSigtOigtable and depiction of an example of a subscription user interface 
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generated by the system and presented to the user as a web 
page. Numeral 402 denotes a section collecting subscription 
user profile data. Numeral 406 denotes a section collecting 
user profile acceptance criteria data. Numeral 408 refers to 
some subscription user profile acceptance criteria data, to be 
compared against subscription user profile data. Numeral 
410 refers to some base user profile acceptance criteria data, 
to be compared against base user profile data. Numeral 412 
denotes an optional section allowing the user to specify 
message acceptance criteria data. Subjects 414 and Content 
Search 416 are two examples of different kinds of message 
acceptance criteria data that can be compared against the 
content and profile of an email message. 

Referring to FIG. 5 A, the numeral 208 generally refers to 
a process of signing a user up for a particular mailing list 
with the service provider, specifying user profile acceptance 
criteria data, and storing the subscription. 

At block 442, the user goes to a web site utilizing a 
portion of this invention. At block 443, the web server 
ascertains whether the user is known to the service, or a new 
user. If he is known, processing, moves to block 445. If he 
is not known, the server proceeds to block 444 and presents 
the user with a new user registration screen. Upon providing 
profile data such as name, address, email address, age, and 
occupation, the server stores the base user profile data record 
in the database. Processing then continues at block 445, (In 
an alternative embodiment, instead of continuing to block 
445, processing ends immediately at block 458, and the user 
specifies acceptance criteria at a later time.) 

At block 445, the server presents to the user a set of web 
pages representing a collection of available mailing lists. 
The user selects a mailing list of interest and indicates via a 
user interface that he wants to subscribe to it. At block 446, 
the server retrieves the mailing list record and related 
template records from the database. It uses these to build a 
subscription form, and presents it to the user The form 
collects acceptance criteria data from the user. It may also 
collect additional user profile data specifically needed for the 
mailing list the user is subscribing to, as specified in the 
template records in the database. At block 447 the user fills 
out and submits the subscription form. 

At block 456 the server stores the subscription record in 
the database, including the gathered acceptance criteria, 
Block 458 ends the process. The next phase of the use of the 
present invention is when subscribers begin sending email 
messages out to their mailing lists. 

As illustrated by the shaded area designated 209, block 
448 is an optional step that can be done as each subscription 
is submitted by a user, or at a later time. Thus it is shown as 
an optional step. At block 448 the server analyzes all 
subscription records in the subscription table to calculate the 
degree of matches between the user profile data of the newly 
subscribing user and the acceptance criteria of each user 
ahready subscribed to this particular mailing list. This is 
depicted in detail in FIG. 5B and described in detail below. 

At block 452 the server stores the subscriber match 
calculations made in block 448 in the database's matches 
table. They will be used later to select a subset as the 
subscriber's personal recipient list for sending out messages, 
or to indicate to each user with each message the degree of 
subscriber match between the user and the message sender. 
Processing then continues at block 456 as described above. 

As further illustrated by the bracketed area designated 
210, an alternative embodiment allows user feedback and 
criteria tuning during the subscription process lliis embodi- 
ment includes that which is enclosed in the dashed box and 
also the shaded area designated 209 and described above. In 
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this alternative embodiment, after processing at 208 as 
described above, the system proceeds to block 449, where it 
determines email traffic this subscription would have 
received in the recent past and the characteristics the user 

5 match calculation has produced. It determines the email 
traffic by matching the new subscriber's message acceptance 
criteria data to the email archives table in the database for 
messages sent by matching users as determined in block 
448. The search is further constrained to messages sent to the 

10 mailing list of interest. The matching process used is similar 
to the one that is described in detail below and depicted in 
FIG. 10. (In an alternative embodiment (not depicted), in 
block 449 database sampling or a similar technique known 
to those skilled in the art is used to provide an estimate as 

15 feedback.) 

At block 450 the system gives the user a web page or other 
form of feedback about the subscription the user has speci- 
fied. That information includes number of users exactly 
matched to the user and an estimate of the average number 

20 of messages per day that the subscription will receive. (In an 
alternative embodiment not depicted, the system may 
present more detailed feedback to the user about partial as 
well as exact matches, rather than just 100% matches ) At 
block 451 the user chooses whether to accept the subscrip- 

25 tion as specified or further refine or modify it, If the user 
accepts the subscription, processing continues at 452 as 
described above. Otherwise processing returns to block 447., 
In an alternative embodiment (as suggested in FIG, 2), the 
user can subscribe to a list dynamically at the time of 

30 sending a first message to the list. In that case, the subscript 
tion data and possibly the user profile data would be sent via 
email or other means along with or just ahead of the first 
message. ITie subscription feedback steps of the current 
process (blocks 449-451) are skipped, and the first message 

35 is delivered in accordance with FIG 10 and the related 
description below. The subscription may either be stored in 
the database, or if it is a transient subscription ("one-shot 
thread" subscription), simply associated with the single 
email message and not stored in the subscription table. In 

40 this latter case, replies to this message back to the mailing 
list would reach the original sender, but other messages to 
the mailing list would not. 

To summarize by way of example, suppose a user decides 
to try out a mailing list that uses this invention. He signs up 

45 at the service provider's web site, selecting a mailing list 
about the topic of financial investments. He specifies (user 
profile acceptance criteria data) he would like to interact 
with other men of age 40™50 who live within three miles of 
him and do not have children. Using an optional feature, he 

50 selects the subtopics (message criteria) related to internet 
stocks, junk bonds, and international mutual funds. The 
system responds with a preview of 38 matching subscribers 
and five messages per week. He wants more people to 
interact with, so he increases his age criteria to include men 

55 between 35-55. He also increases his distance criteria to five 
miles. Now the system matches him with 68 people and 12 
messages per week, and he accepts the setup. ITje system 
stores that subscription; soon he will begin interacting with 
his matched subscribers. 

60 Using Acceptance Criteria Data to Determine Subscriber 
Matches: 

Turning now to FIG. 5B, the numeral 448 generally refers 
to a process of using user-specified acceptance criteria data 
to calculate subscriber matches. The overall process here is 
65 to calculate for each subscriber the degree that his user 
profile data matches each other subscriber's acceptance 
criteria data. 



us 6,480,: 

11 

At block 474, the server starts by retrieving a subscriber 
list for the mailing list from a database query. At bock 476 
the server gets the first subscriber on the list. At block 478 
the server calculates the degree to which the subscriber's 
user profile data meets each other subscriber's user profile 5 
acceptance criteria data. There are a numberof methods well 
known to those skilled in the, art for making such match 
calculations. 

In the preferred embodiment this is not a two-way match. 
Even if user X does not want to receive message from user lO 
Y, user Y may choose to receive messages from user X if all 
of Y*s acceptance criteria data are met . Acceptance criteria 
data may include a plethora of different choices, including 
location, age, sex, hobbies, skills, preferences. While U..S. 
Pat. No. 5,555,426 by Johnson et al describes a method and 15 
apparatus for message dissemination that is based on recipi- 
ent's acceptance criteria data, its intent and focus are on 
simple topic keywords and sender identities.. It did not 
comprehend the use described here. The scope of the present 
invention includes much more comprehensive acceptance 20 
criteria data with a significantly different intention, result, 
and benefit for the users, not suggested by the Johnson 
patent. 

(In an alternative embodiment not depicted, a two-way 
match process is used in which two match calculations are 25 
made. A two-way match, sometimes referred to as a mutual 
match, is when a user X's acceptance criteria data matches 
a user Y' s user profile data, and user Y's acceptance criteria 
data matches user X's user profile data. In this alternative 
embodiment, in addition to the match calculation described 30 
above, the system also calculates the degree to which each 
other subscriber's user profile data meets the subspriber's 
user profile acceptance criteria data. These calculations are 
combined into one summary calculation, or are stored 
separately.) 35 

At block 479 the match calculation data, also sometimes 
referred to as the match score, is stored in the matches table 
in the database. At block 484, the server tests whether there 
are more subscribers in the list obtained in block 474. If 
there are, then at block 486 the server gets the next sub- 40 
scriber and returns to block 478 to continue processing. If 
there are no more subscribers for whom to do match 
calculations, processing ends at block 488, 

Next we will focus briefly on some details about the use 
of acceptance criteria data for selecting subscriber matches 45 
for interaction within a group. 

Generally, this is the process of determining whether a 
piece of profile data matches a piece of acceptance criteria 
data. This process is used either for comparing user profile 
data to user profile acceptance criteria data, or optionally for 50 
comparing message profile data to message profile accep- 
tance criteria data. The system calculates a degree of match 
between two subscribers, based on one subscriber's user 
profile data matching to the other acceptance criteria data. 
Alternatively the matching can be calculated as a two-way 55 
match, instead of a one-way match, including both users' 
acceptance criteria against each other's user profile data. 

For each acceptance criterion to test, the server deter- 
mines the profile data field that matches the current accep- 
tance criterion. The field data may be one of a number of 60 
different data types, including text strings, numbers, dates, 
geographical locations, references to entire other acceptance 
criteria data records, and lists of any of the aforementioned 
types. The associated acceptance criteria data are generally 
ranges of field data, e,g„, number range acceptance criterion 65 
for number profile data, geographical area of interest accep- 
tance criterion for geographical location profile data, etc. 
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Methods for representing such data types and the type 
information itself are well Imown by those skilled in the art. 

If an acceptance criterion is a reference to another sub- 
scriber's acceptance criteria data, then the entire profile data 
set becomes the data to be tested against the referenced 
entire set of acceptance criteria data. 

An alternative embodiment to FIG. 5B is depicted in FIG. 
6. In this embodiment, an SQL database query approach is 
taken. Block 448 again generally refers to a process of using 
user-specified acceptance criteria data to determine sub- 
scriber matches. At block 490, the query conditions string is 
defined to be empty, to begin building a complex query. At 
block 491, conditions are appended to the query to select 
only subscriptions from the subscriptions table that are 
subscriptions for the target mailing Hst. Block 493 adds the 
condition that selects subscribers who match the new sub- 
scriber's acceptance criteria data, Block 494 adds the con- 
dition that selects subscribers who will accept the new 
subscriber, per the new subscriber's user profile. At block 
496, the query is sent to the database server The result back 
from the database ser\^er is a list of subscribers matching all 
of the conditions. At block 498 the system returns the 
matched subscribers to the super-process, completing the 
task of determining matched subscribers. 

Another alternative embodiment to FIG. 5B is depicted in 
FIG, 7. In this embodiment, the matching is done through 
multiple computers operating as a distributed system. All 
communication between computers is through a standard 
means such as CORBA. A Match Dispatch Server computer 
distributes the matching process across a cluster of Match 
Servers, Each match server handles part of the total number 
of subscriptions in the system. Each match server keeps its 
own cached copy of the database data for high-speed access 
during the matching process. To conduct a match, a client 
sends a match request to the Match Dispatch Server 
("dispatcher"). The dispatcher has a lookup table describing 
which Match Servers are needed to compute a particular 
match. The dispatcher returns a list of Match Servers to use 
in completing a dynamic match. The client then requests 
those match servers to perform partial matches, and the 
results are combined for the final answer, The looknip table 
is centralized on the dispatcher system. Data changes (e„g., 
from a user tuning his community settings on the web site) 
will first be stored in an SQL database, and then updates 
distributed to appropriate server(s). Although FIG. 7 only 
shows a single dispatcher, multiple redundant dispatchers 
may be used. 

Referring to FIG, 8, the numeral 216 generally refers to an 
example of subscribers sending messages to the mailing list 
email address for distribution to other matching subscribers 
within the list. The service provider previously designated 
an email address as the mailing list's address, a practice well 
known by those skilled in the art. Block 502 is an example 
of a message sent to "neighbors" mailing list, and block 504 
is a response from one of the subscribers who received the 
original message. 

Referring to FIG. 9, the numeral 520 generally refers to an 
alternative embodiment to FIG. 8 in which the system 
receives a message from an unknown user, Embedded 
within the ordinary email message is the unknown user's 
profile and criteria data. Block 522 is the header portion of 
the email message. Block 524 is the profile and criteria data 
portion of the message, containing all necessary data for 
cross-matching the unknown user with the known subscrib- 
ers. The embedded data could alternatively come via an 
attachment or other means. Or alternatively the entire com- 
munication could be transmitted via another means besides 



us 6,480,885 Bl 

13 14 

email, such as ihe HTTP protocol Block 526 is the body of In anther alternative embodiment, block 616 is replaced 

the message to be distributed. with block 620. In block 620, the message is distributed to 

Process of Distributing Electronic Mail Messages: all recipients in the sender's recipient list, and each sender 

Referring to FIG, 10, the numeral 220 generally refers to receives some indication of the match score or generally the 

a message distribution process, wherein an email message 5 degree of match. 

sent by a subscriber is distributed to a subset of subscribers FIG. 11 depicts an alternative embodiment to that 

who match the sending user and his message. depicted in FIG. 10. In this alternative embodiment, the 

At block 602 the system receives an email message from distinction from FIG. 10 is that which is shown in the dashed 

a known user WeTl call this user "sender*'. (In an alternative box. Blocks 614 and 616 of FIG, 10 are replaced by blocks 

embodiment as suggested by FIG- 2, the message received lo 674-678 of FIG. 11. Other than that the diagrams and 

is from an unknown user ) process are identical. In block 674, a database query is 

In our preferred embodiment, no message profile data is performed to determine matched subscribers, rather than 

obtained with the message and no matching occurs by using the pre-calculated matched subscribers stored in the 

message profile and message criteria. matches table. This would be completed in the same way as 

At block 606 the system determines the sender's email 15 previously shown in FIG, 5B or FIG. 6 and the accompa- 

address and checks the database or elsewhere to be sure the nying description. (In optional block 676, the resulting list 

messageisfromasubscriberof the specified list. If she is not from 674 is pared down by removing subscribers whose 

a subscriber, processing proceeds to block 610 where the message acceptance criteria data indicates they don't want to 

message is rejected and a rejection return email is sent to the receive this message.) Finally in block 678 the system 

sender, and processing concludes. If block 606 succeeds, 20 distributes the message to the final list of recipients via the 

then processing continues at block 614, where the system internet or by another method of delivery, 

retrieves the sender's recipient list from the matches table. Description — ^Additional Alteraalive Features 

In block 616 the system finds the subset of the recipients One additional feature would be to allow users the option 

whose match calculation is a 100% match with the sender. of specifying a subscription expiration date. The system 

(In an alternative embodiment not depicted, an additional 25 stores store the expiration dale in the subscription field. The 

next step at this juncture is to reduce the subset by removing system periodically checks the subscriptions table for 

recipients whose message criteria isn't met by the sender's expired ones. It notifies the user of an expired subscription 

message.) via email that his subscription has been deleted. 

Finally system distributes the message to the final subset Another feature is to give the subscribing user feedback at 

of recipients via the internet or by another method of 30 subscription time on the identities and/or other info about 

delivery. what subscribers he has been matched up with. This may 

In one alternative embodiment (not depicted), the first line include email addresses, geographical data such as a graphi- 
of the body or the subject line of the message received at 602 cal map indicating locations of other users, 
contains keywords in brackets to specify the message's Another feature is a way for users to be hidden from being 
profile data, e.g., "[for sale]" or "[school]".) 35 revealed to a sender as potential recipients of a message- 
In another alternative embodiment (not depicted), the user Some users may desire privacy, and this feature would 
fills out a form accessed at the service provider's web site or restrict the processes described herein from revealing that 
uses an email-based form. The form includes message body user's identity or other information. The processes are 
and various form controls such as checkboxes for the user to simply, modified to maintain privacy of these users, 
specify the message's profile data (e.g., this message is 40 Another feature is to allow a user to exclude particular 
about subject "for sale"). The system receives the form data subscribers and subjects from his interactions. Excluding 
at 602 and processes it in a similar manner. subscribers is similar to chat's "ignore user" feature and is 

In yet another alternative embodiment as suggested by implemented by allowing the user to enter email addresses 
FIG. 9, if in block 606 the sender is not a subscriber, or user names of users to be ignored The subscriber match- 
processing proceeds to block 607 where the system checks 45 ing process described in FIG. 5A, block 448 and FIG., 5B are 
whether the sender's profile data and criteria data or just the modified to ignore the specified users. The user can also 
sender's profile data are included in the body of the message. exclude subjects by entering a search string on the subscrip- 
If the data is not included, processing proceeds to block 610 tion tuning web page. The search may be a simple search or 
and continues as described above. If the data is included, complex search predicate. FIG, 10 block 616 is modified to 
processing continues at block 608 where the system matches 50 screen out recipients whose search strings match the mes- 
the user against each other user who is a subscriber to the sage content. 

mailing list. This is done using the same process as previ- Ano±er feamre is for the service provider to be able to 

ously described for calculating matches between users. exclude certain trouble-maker users or groups of users (e.g., 

Processing then continues at block 609. hate groups) from the system. 

In still alternative embodiment, if block 606 succeeds, 55 Another feature is a way for users to volunteer lo mod- 
processing continues at block 609. At block 609, the system erate a discussion. A moderator acts as a human filter for 
tests whether the message meets the sender's message inappropriate messages, scanning for "spam" and other 
profile acceptance criteria data. This is to make sure that the messages that shouldn't be sent to the subscribers. A user 
sender is not distributing a message which she herself would can only moderate messages she receives through her sub- 
block as an incoming message, based on her message profile 60 scription and she only moderates messages for users that are 
acceptance criteria data. An example of when this happens on her recipient list. A user volunteers on her subscription 
is when the user is not accepting "for sale" topics, but sends tuning web page. If in this preferred embodiment there are 
out a message with a "for sale" message profile. If ihe more than three active moderators, this user is offered only 
message does not meet the sender's message profile accep- to be put on a moderator wait list. But if there are less than 
tance criteria data, then in block 610 the message is rejected 65 three moderators, this user is considered,, There may then be 
and the process ends. If the message meets the acceptance a process of requesting an email vote of approval from the 
criteria data, then processing continues at block 614. other subscribers this subscriber interacts with If a vote is 
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taken, the volunteering is only allowed if that vote comes to group acceptance criteria data Note that recipient lists of 

back substantially positive. Her subscription record is then subscribers not in the group are also affected. Whenever a 

flagged with a volunteer moderator flag. During message group member changes his acceptance criteria data, other 

processing, as shown in FIG. 10, moderators within the group members are notified and the group leader(s) must 

recipient distribution list are located and one or more of 5 approve the change or expel the changing member from the 

them is emailed a request to approve the message for group. The group will still interact with users outside the 

distribution. The message is stored in a suspended messages group, but only with users that form a mutual acceptance 

table in the database along with its distribution list until an criteria data match with the compound group acceptance 

approval or rejection is returned. If the message isn't criteria data. Alternatively, the group can simply lock out all 

approved or rejected after 5 days or another period of time, lO non-members from all communication, 

it is removed from the database and returned to the sender Another feature is to allow acceptance criteria data sets 

If a moderator approves the message, it is then sent to the outside the scope of a particular subscriber to be used 

distribution Hsl. If it is rejected, the sender is informed via optionally by each subscriber or enforced upon all subscrib- 

email In either case the message is then removed from the ers. The service provider could set up acceptance criteria 

suspended messages table. is data that is associated with an entire mailing Hst, that 

A variation of the above is a feature to allow the user to specifies that all users must be inside the United States for 

specify "ignore moderator." This allows the user, if so the list. Or a member or the service provider may specify an 

desired, to receive all messages regardless of the moderator. acceptance criteria data parameter that when applied rids the 

Another variation is to allow each user to select from one or system of certain kinds of unwanted commercial email. In 

more available moderators which moderator he wants, if 20 either of these cases, or any other similar case, the system 

any, allows acceptance criteria data to be named and stored in the 

Another feature is to allow the acceptance criteria data to database, and for any user to add that acceptance criteria 

include a complex search predicate, an example of which is data by reference into their own acceptance criteria data for 

"recommend*OR 'for sale' OR (city and poHce)". Processes a subscription, 

for applying such a search predicate are well know by those 25 Another feature is to have the email delivery process 

skilled in the art. This search could be applied to the message control the delivery of reply email messages in a different 

subject and/or content, to the user profile, or to the message manner. Replies to an email message go to the distribution 

profile. list of the original message, rather than the replying sub- 

Another feature is to allow more advanced geographical scriber's distribution hst. This keeps a discussion with the 

location matching against acceptance criteria data, A map- 30 same group of users, with the potential down-side of some 

ping product or service is used to recognize street addresses users interacting with each other who don't usually interact, 

and allow users to specify geograpliical areas, such as zip The system stores the email message in the email archive 

code, neighborhood name, city, county, state, region, or an table. It then stores in the database a relationship between 

outline drawn on a graphic image of a map. Thus a user can the email message sent and the distribution list the message 

specify the exact geographies of interests and the system can 35 was sent to. The unique ID of the email message's database 

match users based on street addresses and geographies, record is then encoded in the "To" header field of the email 

Alternatives to street address data are the use of street message, e.g,, "To: neighbors-1354321@local2me,com'', 

intersection, GPS coordinates, longitude and latitude. If the When someone responds to the message via their email 

location is not a specific point, but rather an area, a user client's reply all feature, the message is addressed back to 

would be considered to be generally within that area, and 40 that To header field, including the encoded unique ID. When 

would match another user's geography of interest if the two the message arrives at the server, the message is recognized 

areas intersected, as a reply to an original posting, and the unique ID is 

Another featuire is to allow users to maintain the privacy extracted from the email address (1354321 in the above 

of their geographical locations by using a small geographical example). It then uses the stored distribution list associated 

area, such as a Vz mile radius around the user's house, in 45 with the unique ID, rather than the sender's distribution list, 

place of an exact location. This reduces the chance of for distribution. The step of checking each recipient's mes- 

another user being able to pinpoint someone's exact loca- sage acceptance criteria data is skipped because the stored 

lion. The system would allow the user to specify this as part distribution list has akeady done that. The message is then 

of their base user profile. It would consider the base user sent to the distribution hst. An alternative approach is to 

profile data to match another user's location acceptance 50 have the reply go to the replying subscriber's distribution 

criteria data if the geographies intersected. list, but add some text at the bottom of the message for 

Another feature is allowing two or more subscribers of a anyone getting the reply who did not receive the original 

particular list to form a group, agreeing to share acceptance message it was a reply to. That additional text would be a 

criteria data as previously discussed. Each member of the link to a web page showing the archives of the referenced 

group agrees to apply each other member's acceptance 55 email message(s). 

criteria data to everyone except that other member, also Another additional feature allows a user to override 

previously discussed. Any member can form a group by subscription settings when sending a message. The subscrip- 

selecting a user interface element on the webpage for their lion settings are treated as "default settings", and the user 

subscription. The system asks them to name their group, and can override any of the settings when sending a message, 

keeps track of a list of group members within the group's 60 The user could specify this through additional codes in his 

record in a group table in the database. The founding email message body, or by using a web form when sending 

subscriber and anyone else he specifies become the control- the message. The web form would include access to override 

lers of the group. They must approve all new members via those settings. The subscription matching process described 

an email or web-based approval mechanism. Then as each in FIG. 5B and its related text are used to determine the 

member is admitted to the group, each of the group mem- 65 distribution hst for the present message being sent. The 

bers' subscriptions are recalculated as previously discussed, settings are not stored as the user's permanent settings. An 

to update all subscribers' recipient lists based on the change example use is in a neighborhood mailing hst for a user to 
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send out a "for sale" message to neighbors within 10 miles modified to reflect his email alias rather than the original 

of him, overriding his usual acceptance criteria data of email address listed in his message. The system also shows 

neighbors within 3 miles of him. This feature would have to this alias instead of his email address at any time his email 

exist in conjunction with the previous feature, controlling address would be shown to a user at the web site, 

delivery of reply email messages, so that recipients can 5 Another additional feature is for the system to determine 

answer to the same group. a user's distribution size threshold based on the user's 

Another additional feature is to allow each list to require expertise level. This would warn, for instance, a novice user 

approval for subscription. When a user subscribes, another before sending an email message that would reach more than 

special "approval user" approves or rejects the subscription, 200 recipients. The user is asked during registration to rate 

This could either be for the whole list, or for a given lO their computer experience level, and that experience level is 

sub-group within the list as defined by acceptance criteria matched to thresholds over which the user is warned During 

data. An example is a professional sub-group of a jazz message distribution, the user's threshold is checked for 

mailing list. Subscribers checking the "Professional" expe- whether there are more recipients on the distribution list than 

rience checkbox would need to be approved before admit- the threshold. If there are, the system informs the user of the 

tance. In this case, the subscriber is told that his subscription 15 size of distribution and asks for confirmation. The system 

will need to be approved, and his subscription record is then either distributes, the message or discards it depending 

stored in a pending subscriptions table. The approval user is on the user's response „ 

emailed with a request for approval If the approval does not Another additional feature is for the system to verify a 

take place within 14 days, the subscriber is automatically user's geographic address when a user subscribes to a 

rejected by the system. 20 mailing list requiring address verification. The maOing list 

Another additional feature is to install a process near the record contains a flag indicating that address verification is 

beginning of the email distribution process for eliminating required for subscription. When the user subscribes, the 

unwanted commercial email ("spam"). Such systems are system prints a postcard addressed to the user with a special 

commercially available and are configured independently of verification code. The system then stores the subscription(s) 

this invention. The email server process would allow the 25 in a pending subscriptions table in the database, '^The service 

service provider to configure it to incorporate a spam provider mails the postcard to the user via the United States 

elimination process at the appropriate step in the process. Postal Service. Once the user enters the verification code at 

Another additional feature is lo offer users a written the web site, the subscription(s) are activated. Alternatively, 

language preference and translation between languages instead of using a postcard the system allows another 

within a list. A user specifies the language of choice as pari 30 subscriber of a given list (e.g., a neighbor) to vouch for the 

of the subscription process. At email distribution time, the user, for the given list. In that case, the system stores the 

email server uses an external language translation process to vouching subscriber's user JD in the subscription record of 

determine the message's language. For each user whose the new user, and subscribes the new user 

language preference doesn't match that language, the mes- Another additional feature is to show each user individu- 

sage is translated before being sent The translations are 35 aHzed web content related to each of his subscription. The 

grouped so that a translation into a given language happens web server generates for each user a unique web home page, 

only once per message. A fink to the original message containing a link for each of his subscriptions. Each of those 

enables review and possible other translations, to account Hnks leads to a page containing extensive subscriber-created 

for occasional poor translations, content. The content shown is has been contributed by users 

Another additional feature is for the email server to add an 40 matched to the viewing user. In other words, each user only 
additional text message lo each outgoing message. This sees subscriber-created content that was created by people 
could be an advertisement or appropriate Hnk to web site he is matched with (and from himselt). It displays email 
content, as determined by the service provider. The system archives of messages from the subscribers who match this 
associates header and footer text with the maihng list in the user's message acceptance criteria data. It also displays 
database. The service provider manages that data manually 45 other subscriber-created content that matching subscribers 
through the database vendor's manual database access inter- have previously contributed to the web site, such as inter- 
face. The email server grabs that information from the esting web links, recommendations (such as gardener, 
mailing list database entry at the time of message distribu- electrician, or restaurant), photos, calendar entries, etc. It 
tion and modifies the message content appropriate also displays a way in which this user can add contributions 
Alternatively, the additional text feature may be expanded to 50 to the site. All content is stored in a user web contribution 
allow for distributing different additional text to different table in the database. The web site also provides searching 
sets of users, such as targeted ad insertion. The system of matching subscribers' web sites, from those who have 
associates a number of acceptance criteria data sets specified a web home page in their base user profile data, 
described by the service provider with a number of addi- Another additional feature is a periodic process that runs 
tional text messages. It apphes the acceptance criteria data 55 on the database server that performs cleanup operations- It 
sets one by one to a copy of the distribution list, matching deletes expired subscriptions from subscription table and 
users lo the additional text criteria. As each user is matched, handles other similar types of cleanup automatically. The 
the additional text is added to his message and the user is system has a parameter that can be set up by the service 
removed from the copy of the distribution list The last provider that defines a schedule for performing the database 
acceptance criteria data set is defined to be a null set, with 60 maintenance,, It may also transfer messages older than n days 
all remaining users receiving the last additional text message to a secondary database server, or move the message bodies 
associated with that last null acceptance criteria data set. to secondary computer systems, to reclaim disk space. In 
Thus each user receives only a single additional text mes- this case, the system must account for this when accessing 
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the email archives. 



Another additional feature allows a user to set up an email 65 Another additional feature is to structure the mailing lists 
alias preference as part of his base user profile. Then each into a hierarchy, such that some of the subscription user 
message sent by the user to any mailing list is automatically profile data and acceptance criteria data can be shared 
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between lists. The system can give the user feedback on the 
number of users who form partial matches with him based 
on known acceptance criteria data. For instance, many lists 
will have a geographic distance component. By extracting 
that as a common setting for all of those lists, a user can 
specify early on in the subscription process that he wants to 
interact with people within two miles of him. He can then 
browse all of the lists that are in that part of the hierarchy, 
and see the number of users he is matched to in each of the 
lists. This gives him very helpful feedback on what lists are 
active in his immediate area., To accomplish this, the system 
establishes database relationships to keep track of the hier- 
archy. It also establishes default values for profile and 
acceptance criteria data such that partial matches can be 
determined with partially specified user profile and accep- 
tance criteria data. 

Another additional feature is to let a user aggregate 
several mailing lists together into one "virtual list" for her. 
She is offered the option of combining two or more sub- 
scriptions into one "meta-subscription" that appears as one 
mailing list in her email box. An example: she wants to 
combine a "theater" subscription and a "singers" subscrip- 
tion into one meta-subscription she calls "my-arts". Incom- 
ing messages to her are then addressed to that list name„ 
When she sends out a message, the underlying mailing lists 
become message acceptance criteria data which she can 
check on or ofE individually to indicate which lists her 
message should go to. Additionally, for each list she selects, 
she also needs to specify message acceptance criteria data 
within that list as per the prior discussion. 

Optionally, when a message goes to several lists, recipi- 
ents belonging to more than one of those lists will orally 
receive one message (as happens today with newsgroup 
"cross-postings"). 

Another additional feature is to allow the user the option 
of receiving messages for a subscription on the service 
provider's web site, rather than in her email inbox. In this 
case the system keeps track of which messages she has and 
hasn't read, and provides a means of reading and replying to 
messages. 

Another additional feature is to allow users to create 
ballots to collect votes on any subject from uisers they are 
matched lo„ A user describes the ballot questions via a web 
site user interface, and the system creates a poU and emails 
it out to the matched users on the mailing list. The results of 
the poll are tallied and available for viewing on the service 
provider's web site. Another additional feature is to provide 
the user the option of a digest version of messages from a 
subscription. Rather than each message being delivered 
separately, a digest message containing multiple messages 
collected over a short period of lime is sent out periodically 
Each user specifies when to send out a digest to them, based 
on time, number of messages waiting, etc. The system 
collects messages and periodically delivers the digest to the 
user. 

Another additional feature is to provide inexact matching, 
letting users set thresholds and insUructions for different 
levels of matching. Rather than the previously described 
100% match, this allows for partial matching. The user can 
specify different actions, e,g., they might want scores of 60 
100% delivered via email, those from 70-99% delivered via 
a daily digest summary email, and those from 60-69% 
delivered weekly via digest summary email Scoring the 
extent of the match also provides the user the ability to 
literally "turn the volume up or down" on a subscription as 
a whole. He simply controls a single parameter specifying 
the threshold for messages to get through. 
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A related additional feature is to provide the user with a 
way of expressing the volume of email he desires, and then 
adjust automatically the score threshold to approximate that 
volume of trafSc. Likewise, the user and/or service provider 
might want to limit the size of messages (avoiding binaries, 
pictures, etc). 

Another additional feature is to use more advanced ways 
of matching acceptance criteria data to user profile data, 
such as fuzzy logic, artificial intelligence techniques such as 
discrimination nets, etc. These are techniques well known to 
those skilled in the art, and can readily be applied within the 
scope of the present invention. 

Another additional feature is a billing mechanism wherein 
certain "high value" lists are accessible for a fee based on a 
variety of pricing models, such as monthly charge, volume 
of messages sent or received, etc. Additional tables would 
store information to aid in tracking these changes. The 
billing mechanism would periodically process the informa- 
tion to generate bills for users- 

Another additional feamre is allowing subscribers to have 
references within their acceptance criteria data to other 
subscribers' acceptance criteria data. This is a way for 
subscribers to use each other's acceptance criteria data. 
There are many uses for combining acceptance criteria data, 
with some "real world" parallels. For instance, when musi- 
cians form a band, it is often through a process of beginning 
with each individual's acceptance criteria data, testing 
whether there is common acceptance criteria data that makes 
sense, and then finally combining their acceptance criteria 
data. 

In the example below, three subscribers B, C, and D are 
in different locations and are of different ages. They have 
met in a "travel" dynamically matched mailing list, and 
decide to form a discussion niche within the list,. The 
subscribers add references to each other's acceptance crite- 
ria data to the records. Their relevant user profile data and 
acceptance criteria data are: 
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Subscriber 



Location 
(profile) 



Acceptance criteria 
data for others' 
locations 



Age 
(profile) 



Age 
Criteria 



Other 
Criteria 
Records 



Brazil 



California 



Denmark 



RcstiUing 
"Outsider" 

Accept- 
ance cri- 
teria data 



N/A 



California or Den- 
mark or Brazil 
California or Den- 
mark or Brazil or 

Germany or New 
York 

California or Den- 
mark or Brazil or 
Venezuela 
California, Brazil, 
or Denmark 



20 



26 



23-33 



20-30 



N/A 23-27 



C,D 
B,D 

B,C 
N/A 
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Each subscriber has previously specified location accep- 
tance criteria data and age acceptance criteria data that 
match the other two subscribers. To form a group, these 
three subscribers specify to the system to use each other's 
acceptance criteria data. 

Before doing this, the subscribers B, C, and D would each 
be matched with some other subscribers on the maiUng list, 
which the other members of B™C-~D weren't matched with. 
By incorporating each others' acceptance criteria data they 
all exclude those other subscribers who do not meet all three 
sets of acceptance criteria dala„ A subscriber acceptance 
criteria data are never used on that subscriber Since that 
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subscriber's acceptance criteria data are his acceptance 
criteria data for others and not for himself, it is not applied 
to him. Referring to our previous example, subscriber B is 
20 years old, but his acceptance criteria data for others is age 
2.3-33, which doesn't include him. Thus when a second 
subscriber uses a first subscriber's acceptance criteria data, 
in the preferred embodiment he does not apply that accep- 
tance criteria data to the first subscriber when determining 
interaction participants. Also in thy preferred embodiment, 
referenced acceptance criteria data are referring to the 
combination of a subscriber's user profile acceptance criteria 
data and message profile acceptance criteria data. 
Alternatively, the two types of acceptance criteria data could 
be referenced and used separately between users. 

When B combines C's and D's acceptance criteria data 
with his own, the resulting acceptance criteria data an 
"outsider" then has lo meet is the intersection: California or 
Denmark or Brazil, and age range 2.3-30. The combined 
outsider acceptance criteria data has a modified age range of 
23-27. Thus when determining a subscribers' recipient list 
for a message, outsiders from this group would have to 
match all of B, C, and D's acceptance criteria data in order 
lo exchange email with any of them. If a fourth "outsider" 
subscriber "E" from Denmark, age 30, looks for interaction 
matches in the subscriber list, B, C, and D will not match 
because of their references to each others* acceptance cri- 
teria data„ Since D's age acceptance criteria data excludes E, 
E doesn't match any of them. 

An acceptance criterion reference to another users accep- 
tance criteria data can be thought of as a container. Each 
acceptance criterion inside the referenced user's acceptance 
criteria data set must be checked. Thus, the system would 
perform the entire acceptance criteria data process lo com- 
pare the new set of acceptance criteria data against the given 
data set. The system must allow for the possibility of circular 
references to avoid an "endless loop"; techniques for han- 
dling this are well known to those skilled in the art. 

Since any one user's changes to his criteria impact 
everyone in the group, the system would include at least two 
types of groups: "democratic" and "dictatorial". In a demo- 
cratic group, the system notifies users of any proposed 
criteria changes, and users have the opportunity to discuss 
and vote be changes go into effect. In a dictatorial group, one 
or more of the users are in charge, and approve all criteria 
changes through a mechanism provided by the system.. 

There are many other features of electronic mailing list 
systems such as Majordomo, Listserv, and eOroupsxom that 
are well known to those skilled in the art, that have obvious 
additional features for the present invention. 
Description — Alternative Embodiments for the Present 
Invention 

As discussed earlier, there are many alternative embodi- 
ments of the present invention. People need personalized, 
tunable communities. They need the ability lo specify and 
match up with other people in a variety of electronic forums. 
This invention is a very powerful way of allowing them to 
do that — lo see only the people they're matched to see. It's 
like going lo a party with all the right people. 

One major Difference between different kinds of forums 
is the latency of the transmissions between parties. Whereas 
a forum like email has a high latency, a forum such as chat 
has continuous transmission between the parties, or low 
latency. 

One alternative embodiment is voicemail. Voice mail is 
very similar to electronic mail in that users typically have a 
mailbox, and there are group distribution lists, like elec- 
tronic mailing Hsts for email. Interaction is non-realtime: 
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each user uses voicemail without any real-time, direct inter- 
action. Thus voicemail, being so similar to email, is a direct 
application of the present invention to that medium. The user 
may access the service visually (e.g., web) or orally (e.g., 
5 telephone). 

Another alternative embodiment for the present invention 
is unified messaging. Unified messaging is a medium that 
combines email, voicemail, fax, and potentially other com- 
munication services and lets each user select Iheir medium 

10 of choice. Sun, Lucent and a number of other companies 
develop unified messaging solutions. Since unified messag- 
ing can always get from other mediums to email, unified 
messaging is a direct application of the present invention to 
that medium. These are just different mediums for 

15 communication, but they aren't materially different for our 
purposes. In the preferred embodiment all setup, control, 
and access to subscriptions, shard data, etc, happens via the 
web. One modification to that for this alternative is to allow 
that setup, control, and access to happen via email (or email 

20 translated to other unified messaging mediums) instead of 
the web. 

A natural extension to unified messaging is lo include 
telephone, pager, and instant messaging communication, as 
additional mediums of communication. A user may use 

25 different forms of unified messaging for different subscrip- 
tions, For instance, a user may want to receive casual 
neighborhood discussion via email, but receive emergency 
messages from any neighbor within 5 blocks via text pager, 
and any communication (e,g., "can I borrow a cup of 

30 sugar?") within one block of them, via both instant messag- 
ing and fax. 

Another alternative embodiment for the present invention 
is web'based discussion boards. FIG. 12 is la diagram 
detailing a process for this alternative. Web-based discussion 

35 boards are very similar to mailing lists, but users receive and 
reply to messages (and possibly send messages) through 
web site rather than an email client application. In other 
words, rather than messages flowing in and out of the user's 
email-box, there is instead a bulletin board metaphor with a 

40 web interface. Tbe subscription process is substantially the 
same„ The system then keeps track of which messages each 
user has and hasn't read„ The message boards section of the 
Motley Fool web site (wwwioolcom) (Dec„ 1998) are an 
example in the prior art of a web-based discussion board, 

45 without benefit of the present invention. 

Another alternative embodiment for the present invention 
is electronic bulletin boards. The most common electronic 
bulletin boards on the internet are USENET newsgroups 
(hereafter referred to as newsgroups). The subscription 

50 process in this alternative is substantially the same; the main 
differences come in reading and posting messages. Subscrib- 
ers post messages through the service provider's server, This 
could be through a newsgroup server port, or using a web 
interface, via email to the service provider, etc. Since 

55 newsgroup postings are replicated on servers throughout the 
Internet, there is some eflSciency to be gained by encoding 
some of the database information about Ihe posting user in 
headers of the posted message. This allows client newsgroup 
reading programs to do some decoding and matching with- 

60 out having to interact with the service provider's server. 
Examples of message headers are: "X-Posting-Type: 
Dynamically Matched Posting", "X-Local2Me-User: 
joej3hotmail". The system may also encode insensitive 
profile and acceptance criteria data from the posting user in 

65 message headers, L-et's call this full set of headers "Dynamic 
Malching"^^^ Headers," (An example of insensitive user 
profile data is whether the siibscriber considers himself to be 
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a "professional" or "amateur" in a given field- A home ICQ, "Yahoo! Pager", AOL Instant Messenger, and Excite 

address is an example of sensitive user profile data that, if PAL allow a user to send another user an immediate text 

needed, will have to be evaluated privately at the service message thai pops up on the other user's screen while the 

provider's server during a user's news reading session.) The user is connected to the messaging system. This is tj'pically 

cUenl newsgroup reading application may use the Dynamic 5 when they are connected to the mtemet and running the 

Matching™ Headers for matching or may require subscrib- messaging cHent application. Instant messaging applications 

ers to read messages through some method provided by a f « ^^^^ equivalent of electronic maihng 

serviceproviderthatisutilizingthepresentinventioo.Inthe i ' r "T'^'. . ' 

77/ I'lw^iviw lua s i' users. Apply mg the present invention to instant messaging 

lattercasethechentnewsgroupreadmgsoftwareknowsbow i,,3^,Vchange to the subscription. An additional user 

to exchange with the server the extra infornaation needed to lO ^^^^^^^^ component in the instant messaging software or on 

support the present mvention. It informs the server of the ^ ^^^^ ^j^^^^ ^ matching users 

identity of the user who is readmg messages. The server then ^^^^^ happens within the context of a 

only transmits messages whose users form a match and subscription to a particular forum, The user may then choose 

optionally a message acceptance criteria data match with the ^ ^ message to any one user on that list. Sending of 

reading user. Alternatively, the newsgroup reading software 15 messages to an entire matching group is routed through the 

may allow the user to see all postings, but highlight match- service provider's instant messaging server, which deter- 

ing ones using color, icons, etc„ llie server in this case mines which message recipients will receive the message. It 

transmits additional information to the news reading soft- then distributes the message to those recipients, As an 

ware about which individual posted messages should have example of its use, a user may have two subscriptions set 

this special highlighting. 20 up — she wants to hear from all neighbors within five blocks 

If the client newsgroup reading software knows how to from her about for sale items, and all neighbors within one 

interpret Dynamic Matching*^^^ Headers, it may choose to do block of her about emergencies. 

the matching itself, which may be more elQQcient than Another alternative embodiment for the present invention 

accessing the server for determining match status for each is online chat. The subscription process is modified in a way 

message, 25 similar to online gaming rendezvous In today's online chat, 

Another alternative embodiment for the present invention users begin by selecting a chat room, and then chatting with 

is online gaming rendezvous. Services such as "Yahoo! everyone in that forum. There is typically a way to ignore 

Games'* (December 1998) offer forums in which users can specified users. The present invention allows a first user to 

meet up for games of cards and other internet-based multi- set up more elaborate acceptance criteria da a only interact- 

player online games. Indeed nearly all commercial computer 30 ing with other users who form a one-way or two-way match 

games to day have some multi- player internet features built with the first user. In the case of a one-way match, the match 

in. The typical online gaming fonim divides the users into calculation is between the first user's acceptance criteria 

skill levels (their main acceptance criterion) and the users data and each other user's user profile data. Alternatively, it 

then have to rendezvous via chat to start a game, or jump allows full chat exchange with all users, but indicates in the 

into an ah-eady-formed game A common experience is to 35 userlist&message window the degree of match the user has 

quit part way through a game when you find that your with each other user. For instance, the system could display 

gaming companions are a bad match, in conversation style, stronger matches in darker colors and weaker matches in 

speed of play, etc. Applying the present invention, the lighter colors.. Subscription settings may apply to one or 

service provider would offer a host of user profile acceptance more chat rooms. After setting up a subscription, the user 

criteria data and user profile data to help users rendezvous 40 can view a list of chat rooms and see what rooms the people 

with the best partners. ITiere is still a registration process for he's matched with are spending their time in. He can then 

collecting base user profile data. The subscription process is select a room and begin interacting. The message profile and 

more transient, being more of a "gaming preferences" setup. acceptance criteria data are not used. Alternatively, the 

Following the setup, the user is presented with a set of message profile and acceptance criteria data are used to help 

players who match up with the user based on a mutual 45 users communicate about specific subjects. In that case the 

acceptance criteria data match. They can then chat, send system queries the user for message profile data if it cannot 

each other instant messages to invite each other to play, etc. be determined automatically. 

Optionally, when messages are sent they may include. Another alternative embodiment for the present invention 
message profile data to allow matched users to apply their is video conferencing.. This is similar to online chat and 
message acceptance criteria data. An alternative is to show so online gaming rendezvous.. The invention is used for finding 
the user all other users, but denote the matching users good videoconferencing partners within a given forum, by 
through an icon or other graphic highlighting. The system either highlighting matching users or only showing match- 
also shows the browsing user games in progress that have ing users. The present invention can be used with either one 
open slots, highlighting the users within those games on one video conferencing, or with group video conferenc- 
matched to the browsing user. He can then join a game that 55 ing. In a group setting, each user conferences with many 
will have the best chance of being satisfying to him. matching users at once, limited only by the limitations of 

Another alternative embodiment for the present invention number of simultaneous user connections in the video 
is online gaming. Many users can play the game conferencing system. Message profiles and message profile 
simultaneously, but each user only interacts with other users acceptance criteria data are not used, 
they are mumally matched to The age software is designed 60 Another alternative embodiment for the present invention 
to allow for game play in which each user sees only the other is audio conferencing, or "party line." This is an obvious 
players he is matched to see. This is very similar in imple- extension of online chat, and similar to video conferencing, 
mentation to online gaming rendezvous, with additional wherein multiple users have an audio-only real-time con- 
functionality built into the game play to account for this nection to each other in a group setting This is implemented 
customized per-player environment 65 in substantially the same manner as video mnferencing.. 

Another alternative embodiment for the present invention Another alterative embodiment for the present invention 

is instant messaging. Instant messaging services such as is online clubs and communities, such as "Yahoo! Clubs" 
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(Dec. 1998), In these services, a group forms around a of match between Y and the user who posted the message 

theme, and users can chat, post messages to a discussion Or the user may be provided a threshold control for selecting 

board, share web links of interest, etc, within that group. By the minimum match score of messages to be displayed, 

using the present invention, the user can create a personal. To summarize the web surfing community forums 

tunable niche within the group. The subscription process is 5 embodiment, let*s take an example, A single forum, called 

the same: after selecting a club, a user can specify his "web surfers," is created by Lx)cai2Me.com to dynamically 

acceptance criteria data within the club. The user then only match web surfers from all over the world as they are surfing 

sees content (chat, message postings, web links, pictures, web sites. It allows users to chat with each other in a group 

calendar entries, etc) of other users who form a match with forum when they are on the same web site, Auser John joins 

the user. The chat portion is handled as discussed in the lO the web surfers forum through the Lx)cal2Me.cora web site, 

online chat application above. Message postings are handled He sets his user profile as a 23 year old single male, living 

as described in web-based discussion boards above. Other in New York City. He sets his user profile acceptance criteria 

areas are handled in a similar fashion. Alternatively, the data to match men and women between ages of 18-28, 

system may allow for one-way acceptance criteria data within 100 miles of him, A separate window for chatting 

application: the first user sees content from second users 15 opens next to his main browser window. John now begins 

who the first user's acceptance criteria data matches, without surfing the web in his main browser window, and as he 

regard to the second users' acceptance criteria data. Another enters each web site, the chatting window updates to show 

alternative process is for to allow moderators, club owners, him the users also browsing that web site that he's matched 

and other "authorities" to view all messages, even if ere is to. John can now exchange messages with users as he surfs 

no mutual acceptance criteria data match. 20 the web. 

Another altemative embodiment is web surfing commu- Clearly, in the burgeoning online communications arena 

nity forums. These forums provide a means for users to there will be other electronic forums that can apply the 

exchange messages with each other based on the web sites present invention to great avail, 

they are viewing. This serxace can be provided indepen- RAMIFICATIONS AND SCOPE 

dently of the web sites that users are posting messages to. 25 CONCLUSION, RAMl^lCA^^ AINU bCUI L 

This is done through web browser plug-ins and other new ^-'^ IMVblNUUiN 

technology that allow the exchanged messages to be stored Thus the reader will see that the present invention, 

somewhere other than the currently-viewed web site. When Dynamically Matching Users for Group Communication, 

users are browsing that site or a particular page at that site, provides a process by which individuals of all ages and 

the messages are retrieved from the independent data store 30 profiles may locate very high quality, personalized matched 

and displayed to the user groups of people for highly satisfying afiSnity group com- 

In this embodiment, the message exchange may happen in munications and community, 

real-time (e.g., chat) or time-shifted (e.g., posting While my above description contains many specificities, 

messages). For example, users at a site such as CNN.com ^^^^q should not be construed as limitations on the scope of 

could communicate with other users who are on that site at 35 invention, but rather as an exemplification of one pre- 

the same time, or who come to the site at other times. The fg^red embodiment thereof. Many other variations are pos- 

present invention is modified to use the web site address ^ible. Several examples, including newsgroups, online chat, 

(e.g., www-Iocallme.com) the user is viewing to match the discussion boards, and instant messaging have been 

user with other users. Alternatively it could use the address explored in the alternative embodiments section above, 

of a specific page being viewed within the web site (eg., 40 Accordingly the scope of the invention should be deter- 

www,local2me„com/community/mternet.html)„ ^^^^ ^ embodiment(s) iUustratcd, but by the 

For real-time exchange m this embodiment, the web site e^^^^ claims and their legal equivalents, 

or page the user is viewing is user profile data Users can set "^h^i is claimed is: 

as part of their user profile acceptance criteria data one or ^ ^ method of dynamically matching defined users of a 

many web pages or web sites ^ an example a user at 45 group communication system, so that subgroups of the users 

CNN.com's user profile data would include CNN.com as his ^^^^ ^^^^^^ characteristics can intercommunicate com- 

currently viewed web site (or alternatively a page within the ^^^\^g the steps of: 

site). His user profile acceptance criteria data could include . . • , 1 

11 . /-Xt Alio * i^AOKvan a) es ab ishing acceptance crilena parameters and user 

all users at CNN.com, ABCsports.com, MSRBC.com, and ^ 1 . . j r • -j u . - 

„ . . . ' , ^ u .u u profile data parameters defining said characteristics; 

PBS.org. For time-shifted message exchange, the web site or 50 , ^ . • , ^ ^ . 

page the user is vie wing when he posts a message is stored b) obtammg acceptance criteria data and user profile data 

as part of the message profile data (not the user profile data). corresponding to the acceptance criteria parameters and 

Other users can set as part of their message profile accep- "^er profile data parameters for each user of a multi- 

tance criteria data one or many web pages or sites. plicity of users; 

An example: a user X goes to eBayxom online auction 55 c) calculating the degree of match between the user profile 

site and posts a message on its web home page using the data of each user and the acceptance criteria data of all 

present invention, and then leaves the web site, A user Y other users of said multiplicity of users, and using the 

goes to eBay.com and sees user X's message if X's user results of those calculations that exceed a particular 

profile data meets Y's acceptance criteria data and if user threshold level of match to identify a subgroup asso- 

Y' s message criteria data matches to liser X's posted mes- 60 ciated with each said user; and 

sage's message profile data. Alternatively, a two-way match d) upon receipt by the system of a communication from a 

process is used. User Y sees user X's message if X and Y particular one of said users including message data and 

form a two-way match of user profile data to acceptance user identity data, maldng said message data available 

criteria data and if user Y's message profile criteria data to all other members of the subgroup associated with 

matches to user X's posted message's message profile data. 65 said particular one of said users,, 

In another alternative, user Y may see all messages, with 2. A method of dynamically matching defined users of a 

an indication associated with each message about the degree group communication system, so that subgroups of the users 
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having certain characteristics can inlercommunicale, com- 
prising the steps of: 

a) establishing acceptance criteria parameters and user 
profile data parameters defining said characteristics; 

b) obtaining acceptance criteria data and user profile data 
corresponding to the acceptance criteria, parameters 
and user profile data parameters for each user of a 
multiplicity of users; 

c) calciilating the degree of match between the user profile 
data of each user and the acceptance criteria data of all 
other users of said multiplicity of users, and using the 
results of those calculations to identify a subgroup 
associated with each said user based on the degree of 
match having a particular relationship to a level of 
match threshold defined for all other users of said 
multiplicity of users; and 

d) upon receipt by the system of a communication from a 
particular one of said users including message data and 
user identity data, said system makes said message data 
available to all members of the subgroup associated 
with said particular one of said users. 

3, A method of dynamically matching defined users of a 
group communication system, so that subgroups of the users 
having certain characteristics can intercommunicate, com- 
prising the steps of: 

a) establishing acceptance criteria parameters and user 
profile data parameters defining said characteristics 

b) obtaining acceptance criteria data and user profile data 
corresponding to the acceptance criteria parameters and 
user profile data parameters for each user of a multi- 
plicity of users; 

c) receiving a communication from a particular one of 
said multiplicity of users including message data and 
user identity data; 

d) calculating the degree of match between the user 
profile data of said particular one user and the accep- 
tance criteria data of each other user of said multiplicity 
of users, and using the results of those calculations, 
which have a particular relationship to a specific level 
of match threshold, to identify a subgroup associated 
with said particular one user; and 

e) making said message data available to all members of 
said subgroup. 

4. A method of dynamically matching defined users of a 
group communication system, so that subgroups of the users 
having certain characteristics can intercommunicate, com- 
prising the steps of: 

a) establishing acceptance criteria parameters and user 
profile data parameters defining said characteristics, 

b) obtaining acceptance criteria data and user profile data 
corresponding to the acceptance criteria parameters and 
user profile data parameters for each user of a multi- 
plicity of users; 

c) receiving a communication from a particular one of 
said multiplicity of users including message data and 
user identity data; 

d) calculating the degree of match between the user 
profile data of said particular one user and the accep- 
tance criteria data of each other user of said multiplicity 
of users, and using the results of those calculations to 
identify a subgroup associated with said particular one 
user based on the degree of match having a particular 
relationship to a level of match threshold defined for 
each user of said multiplicity of users; and 

e) making said message data available to all members of 
said subgroup. 
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5. A method of dynamically matching defined and 
unknown users of a group communication system, so that 
subgroups of the users having certain characteristics can 
intercommunicate, comprising the steps of: 

a) establishing acceptance criteria parameters and user 
profile data parameters defining said characteristics; 

b) obtaining, acceptance criteria data corresponding to the 
acceptance criteria parameters for each user of a mul- 
tiplicity of users; 

c) receiving a communication from an unknown user 
including message data and user profile data; 

d) calculating the degree of match between the user 
profile data of said unknown user and the acceptance 
criteria data of each user of said multiplicity of users, 
and using the results of those calculations; which have 
a particular relationship to a specific level of matching 
threshold, to identify a subgroup associated with said 
unknown user; and 

e) making said message data available to all members of 
said subgroup, 

6. A method of dynamically matching defined and 
unknown users of a group communication system, so that 
subgroups of the users having certain characteristics can 
intercommunicate comprising the steps of: 

a) establishing acceptance criteria parameters and user 
profile data parameters defining said characteristics; 

b) obtaining acceptance criteria data corresponding to the 
acceptance criteria parameters for each user of a mul- 
tiplicity of users; 

c) receiving a communication from an unknown user 
including message data and user profile data; 

d) calculating the degree of match between the user 
profile data of said unknown user and the acceptance 
criteria data of each user of said multiplicity of users, 
and using the results of those calculations to identify a 
subgroup associated with said unknown user based on 
the degree of match having a particular relationship to 
a level of match threshold defined for each user of said 
multiplicity of users; and 

e) making said message data available to all members of 
said subgroup. 

7. A method of dynamically matching defined and 
unknown users of a group communication system, so that 
subgroups of the users having certain characteristics can 
intercommunicate, comprising the steps of: 

a) establishing acceptance criteria parameters and user 
profile data parameters defining said characteristics; 

b) receiving a communication from an unknown user 
including message data and user profile data; 

c) obtaining acceptance criteria data corresponding to the 
acceptance criteria parameters for each user of a mul- 
tiplicity of users; 

d) calculating the degree of match between the user 
profile data of said unknown user and the acceptance 
criteria data of each user of said multiplicity of users, 
and using the results of those calculations, which have 
a particular relationship to a specific level of match 
threshold, to identify a subgroup associated with said 
unknown user; and 

e) making said message data available to all members of 
said subgroup. 

8. A method of dynamically matching defined and 
unknown users of a group communication system, so that 
subgroups of the users having certain characteristics can 
intercommunicate comprising the steps of: 
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a) establishing acceptance criteria parameters and user f) malcing said message data available to all members of 
profile data parameters defining said characteristics. said subgroup. 

b) receiving a communication from an unknown user 1.1. A method of dynamically matching defined users of a 
including message data and user profile data; group communication system, so that subgroups of the users 

. .5 having certain charactenstics can intercommunicate, as 

c) obtaining acceptance criteria data corresponding to the ^^^.^^^ ^^^^^ ^ 2, 3, and 4 wherein in step b) 
acceptance criteria parameters for each of a multiplicity acceptance criteria data and user profile data are obtained by 
of users; extracting information from sources other than directly from 

d) calculating the degree of match between the user the users, 

profile said unlcnown user and the acceptance criteria 12. A method of dynamically matching defined and 

data of each user of said multiplicity of users, and using unknown users of a group communication system, so that 

the results of those calculations to identify a subgroup subgroups of the users having certain characteristics can 

associated with said unknown user based on the degree intercommunicate, recited in any one of claims 5, 6, 7, and 

of match having a particular relationship to a level of g wherein in said obtaining step acceptance criteria data is 

match threshold defined for each user of said multi- obtained by extracting information from sources other than 

plicity of users; and directly from the users. 

e) making said message data available to all members of 13. A method of dynamically matching defined users of a 
said subgroup. group communication system, so that subgroups of the users 

9, Amethodof dynamically matching defined users of a having certain characteristics can intercommunicate, as 
group communication system, so that subgroups of the users recited in any one of claims 9 and 10 wherein in step d) 
having certain characteristics can intercommunicate com- " acceptance criteria data is obtained by extracting informa- 
prising the steps of: tion from sources other than directly from the usens. 

a) estabHshing acceptance criteria parameters and user 14. A method of dynamically matching defined users of a 
profile data parameters defining said characteristics; group communication system, so that subgroups of the users 

b) obtaining user profile data corresponding to the user 25 having certain characteristics can intercommunicate as 
profile data parameters for each user of a multipHcity of '^^f^^ 1° any one of claims 9 and 10 wherein in step b) user 
nrofiled users* profile data is oblamed by extracting information from 

. . , * •.•XL. f sources Other than directly from the users. 

c) receivmg a commumcaUon firom a particular one of 15. Amethod of dynamically matching defined users of a 
said multiphcity of profiled users including message g.^up communication system, so that subgroups of the users 
data and user identity, having certain characteristics can intercommunicate, as 

d) obtammg acceptance criteria data correspondmg to the ^^^-^^^ ^^^^^^ 3 4 therein in step d) the 
acceptance criteria parameters for each of a multiplicity ^^^^^^ ^^^^^ between the acceptance criteria data of said 
of other users who may or may not be profiled users; particular one user and the user profile data of each other 

e) calculating the degree of match between the user profile ^ger of said multiplicity of users is also included in the 
data of said particular one user and the acceptance calculation of the degree of match. 

criteria data of said multiplicity of other users, and 15 ^ method of dynamically matching defined and 

using the results of those calculations, which have a unknown users of a group communication system, so that 

particular relationship to a specific level of match subgroups of the users having certain characteristics can 

threshold, to identify a subgroup associated with said intercommunicate, as recited in any one of claims 5, 6, 7, 

particular one user; and and 8 and further comprising the step of: 

f) making said message data available to all members of before said calculating step, obtaining user profile data 
said subgroup. corresponding to user profile data parameters for each 

10. A method of dynamically matching defined users of a user of said multiplicity of users; 

group communication system, so that subgroups of the users wherein the communication received from said unknown 

having certain characteristics can intercommunicate, com- ^j^gj- said receiving step additionally includes accep- 

prising the steps of: tance criteria data; and 

a) establishing acceptance criteria parameters and user wherein in said calculating step the degree of match 
profile data parameters defining said characteristics, between acceptance criteria data of said unknown user 

b) obtaining user profile data corresponding to the user 50 anduserprofiledataof each user of said multiplicity of 
profile data parameters for each user of a multiplicity of users is also included in the calculation of the degree of 
profiled users; match. 

c) receiving a communication from a particular one of 17. Amethod of dynamically matching defined users of a 
said multiplicity of profiled users including message group communication system, so that subgroups of the users 
data and user identity data; 55 having certain characteristics can intercommunicate as 

d) obtaining acceptance criteria data corresponding to the recited in any one of claims 1 and 2 wherein in step c) the 
acceptance criteria parameters for each user of a mul- degree of match between acceptance criteria data of each 
tiplicity of other users who may or may not be profiled said user to user profile data of all other users of said 
users; multiplicity of users is also included in the calculation of the 

e) calculating the degree of match between the user profile 60 degree of match. 

data of said particular one user and the acceptance 18. Amethod of dynamically matching defined users of a 

criteria data of each user of said multiplicity of other group communication system, so that subgroups of the users 

users, and using the results of those calculations to having certain characteristics can intercommunicate, ^ as 

identify a subgroup associated with said particular one recited in any one of claims 9 and 10 and further comprising 
user based on the degree of match having a particular 65 the steps of: 

relationship to a level of match threshold defined for before said calculating step, collecting user profile data 

each user of said multiphcity of other users; and corresponding to user profile data parameters or ones of 
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said multiplicity of other users for whom user profile 
data is not known; and 
collecting acceptance criteria data corresponding to 
acceptance criteria data parameters for said particular 
one user; 

wherein in step e) the degree of match between the 
collected acceptance criteria data and the user profile 
data of said multiplicity of other users who are profiled 
users is also included in the calculation of the degree of 
match, and the degree of matches between the collected 
acceptance criteria data and the collected user profile 
data is also included in the calculation of the degree of 
match- 

19, A method of dynamically matching defined users of a 
group communication system, so that subgroups of the users 
having certain characteristics can intercommunicate, recited 
in any one of claims 9 and 10 and further comprising the step 
of: 

before said calculating step, collecting user profile data 
corresponding to user profile data parameters for ones 
of said multiplicity of other users for whom user profile 
data is not known; 

wherein in step c) additionally receiving acceptance cri- 
teria data corresponding to the acceptance criteria data 25 
parameters for said particular one; 

wherein in step e) the degree of match between the 
acceptance criteria data of said particular one and the 
user profile data of said multiplicity of other users who 
are profiled users is also included in the calculation of 30 
the degree of matches, and the degree of match between 
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20 



the acceptance criteria data of said particular one and 
the collected user profile data is also included in the 
calculation of the degree of matches. 

20. A method as recited in any one of claims 1-8 and 
further comprising the steps of: 

associating a unique message identifier with said message 
data; 

associating said subgroup with said unique message iden- 
tifier; 

receiving a reply communication from one user of said 
subgroup including reply message data, reply user 
identity data, and said unique message identifier; and 

making said reply message data available to said sub- 
group. 

21. A method of dynamically matching defined users of a 
group communication system, so that subgroups of the users 
having certain characteristics can intercommunicate, as 

recited in claim 2 

wherein in step d) an indication of degree of match to each 
member of said subgroup is also made available to all 
members of the subgroup associated with said particu- 
lar one of said users. 

22. A method as recited in any one of claim 4, 6, 8, and 
10 

wherein in sad making step an indication of degree of 
match to each member of said subgroup is also made 
available to all members of said subgroup. 
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(57) ABSTRACT 

Systems and methods are disclosed for providing secured 
messaging in a communications network environments The 
network environment may include public communication 
channels or networks, such as the Internet. Embodiments of 
the invention may be implemented lo facihtate secured 
electronic messaging between any combination of entities, 
such as one or more customer locations and a message 
center Further, consistent with embodiments of the inven- 
tion, arrangements may be provided to permit the servicing 
of customers within a network environment that integrates 
legacy systems associated with a message center. 



CUSTOMER 
LOCATION 



300 



^382 I 



320 



LEGACY 
MESSAGiNQ 
SYSTEM 




USER 
TERMINAL 



^382 



340 



USER 
TERMINAL 



APPLICATiONS 
SERVER 



-380 



360 



WEB 
SERVER 



Patent Application PubUcation Apr. 3, 2003 Sheet 1 of 7 US 2003/0065727 Al 



ui 

(0 

m 



ly 

Z 

u 



CM 
0> 



z 

H UJ 
< > 

CL 
< 



<3 



CC 
Ui 



o 



2i 

00 



So 
o ^ 



Patent Application PubUcation Apr. 3, 2003 Sheet 2 of 7 US 2003/0065727 Al 



FIG. 2 



S.20 



Customer 
Submits Message 



S.22 



Customer Message 

Translated By 
Applications Server 



S.24 



Translated Message 
Reviewed By 
Message Center 



8.26 



Reply Message 

Prepared By 
Message Center 



Reply Message 
Translated And 
Presented To Customer 



3.28 



Patent Application Publication Apr. 3, 2003 Sheet 4 of 7 US 2003/0065727 Al 



FIG. 4 



S.40 



Customer Logs 
Onto Web Site 



S.44 



Customer Submits 
Message With Browser 



8.48 



Applications Server 
Constructs E-mail Based 
On Message And 
Customer Information 



8.52 



E-mail Reviewed By 
Message Center 



8.56 



Reply E-mail 
Generated By 
Message Center 



8.60 



Notification Sent To 

Customer That 
Reply Is Available 



8.64 



Customer Retrieves 
Reply Message 
From Web Site 



Patent Application PubUcation Apr. 3, 2003 Sheet 5 of 7 US 2003/0065727 Al 



+ # - SecuredHeader 
!C!D=1 2345678 
Intercept = 00 
Notify = 00 
Acxjept= 00 

Response Channel Type = 04 
Cross Sell Type = 05 
Customer E-mail = johnDoe@xyz.com 
Customer Name = John Doe 

Account No. = 123456789012345, 098765432109876 
+ # - SecuredHeader 



FIG. 5 
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Dear Mr. Doe, 

Here's the answer to your current question. 
+ #- INTERCEPT = 01 - # + 

We appreciate hearing from you. 

Regards, 
Company ABC 

Original Message Follows: 



+ #- 

ICID=12345678 
Intercept = 00 
Notify = 00 
Accept = 00 

Customer E-mail = johnDoe@xyz.com 
Customer Name = John Doe 

Account No. = 123456789012345, 098765432109876 
-# + 

Dear Company ABC: 
This is my question about my account. 
Thank you for your prompt response. 
John Doe 



FIG. 6 



Patent Application PubUcation Apr. 3, 2003 Sheet 7 of 7 US 2003/0065727 



Dear Mr. Doe, 

Here's the answer to your current question. 

We appreciate hearing from you. 

Regards, 
Company ABC 

Original IVIessage Follows: 

Dear Company ABC: 
This is my question about my account. 
Thank you for your prompt response. 
John Doe 



FIG. 7 
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SYSTEMS AND METHODS FOR PROVIDING 
SECURED ELECTRONIC MESSAGING 

CROSS-REFERENCE TO RELATED 
APPLJCAnONS 

[0001] This application claims the benefit of priority under 
35 U.S,C. §119(e) to U.S, Provisional Application No. 
60/325,216, filed on Sep. 28, 2001, the entire contents of 
which are incorporated by reference herein, 

BACKGROUND OF THE INVENTION 
[0002] I. Field of the Invention 

[0003] The present invention relates to the fields of com- 
munications and electronic messaging. More particularly, 
the invention relates to systems and methods for providing 
secured electronic messaging in a communications network 
environment, 

[0004] IL Background Information 

[0005] To retain customers and improve sales, many busi- 
nesses provide customer contact or message centers. Such 
message centers are staffed with customer agents or repre- 
sentatives to answer questions and provide assistance to 
customers. A customer message center may be implemented 
as a call center to permit customers to interact with repre- 
sentatives by telephone. In such cases, a toll-free number 
may be provided to access the call center by telephone and 
gather needed information (such as product or account 
information). Message centers may also permit customers to 
submit inquiries by written correspondence or mail. In 
certain cases, businesses may provide help desks or kiosks 
that are located at store localion(s) or in shopping area(s) to 
directly service customers, 

[0006] In today's technology-driven world, many custom- 
ers expect fast and convenient assistance of their service 
needs from businesses. As a result, instead of using more 
traditional forms of communication (such as written corre- 
spondence or in-person contact), most customers prefer to 
use more modern technology and communication channels 
to access information. For example, modem voice commu- 
nication channels, including wired and mobile phone sys- 
tems, can provide flexibility and real-time access to infor- 
mation fi-om customer service representatives. The Internet 
has also created new communications channels and, as a 
result, placed increasing demands on businesses to commu- 
nicate and provide service to customers through e-mail and 
the Web. 

[0007] Many businesses, including companies that have 
large customer segments, have invested in message centers 
that are capable of handling high call volumes on a daily 
basis. Despite such investments, customers are often 
required to wait extended periods of time on the phone 
before being connected with a customer service agent or 
before receiving any requested information. Some call cen- 
ters incorporate automated, voice response equipment to 
process call traffic and provide easy access to frequently 
requested information. While such attempts have proven 
useful, they do not mitigate the majority of call traffic and, 
in certain cases, fail to provide the necessary support or 
information for customers, 

[0008] As companies attempt to provide more eCScient and 
personalized customer service, there is an increasing 



demand to handle higher volumes of requests by e-mail, the 
Web and other communication channels facilitated by the 
Internet. The Internet and the World Wide Web provide a 
global communications architecture that permits users to 
access information from Web sites and communicate using 
e-mail and other electronic communication or messaging 
techniques., As individuals become more accustomed to the 
Internet and electronic communication, the ability to adapt 
and use these communication channels will enable compa- 
nies to successfully mitigate call trafBc and provide service 
at a lower cost. Tliere are, however, several existing chal- 
lenges that face companies seeking to provide these new 
communication channels for customers, 

[0009] For example, modem public communication net- 
works, such as the public Internet, do not provide sufficient 
privacy or protection to permit confidential information to 
be transmitted to customers. Customers seeking confidential 
information, such as balance or credit information in relation 
to their financial account, must be supported with a com- 
munication channel or method that is secure to maintain 
privacy and confidentiality. Further, Web sites and customer 
databases are subject to attack and infiltration by unautho- 
rized users or hackers. Therefore, additional measures must 
be taken to provide secure communication over public 
communications networks, especially when sensitive or 
confidential information needs to be stored and/or provided 
to customers, 

[0010] Companies must also deal with integrating existing 
database and messaging systems to accommodate these 
more modem communication channels. While these existing 
systems may permit call center activity and internal e-mail 
routing, they are often limited or incompatible with modern 
technology (such as technology that permits communication 
through a Web site or public e-mail routing). Thus, compa- 
nies are faced with either replacing their existing systems or 
finding a solution that will permit integration of newer 
technology, while still maintaining their investment in their 
existing customer contact systems. 

[0011] Moreover, past attempts to provide e-business solu- 
tions and customer messaging by e-mail or other electronic 
messaging arrangements have not proven useful. For 
example, many e-business applications that permit custom- 
ers to submit inquiries by e-mail or through a Web site are 
not compatible with legacy messaging systems. Further, past 
attempts are limited in their handling of customer messages 
and/or do not provide sufficient information to permit proper 
handling of customer messages by a message center 

SUMMARY OF THE INVENTION 
[0012] In accordance with embodiments of the invention, 
systems and method are provided for facilitating secured 
messaging. Generally, such systems and methods provide 
secured messaging in a network environment that includes a 
public communications network, such as the Internet. 
Embodiments of the invention may be adapted to provide 
secured electronic messaging for facilitating communica- 
tions between, for example, customers and a customer 
service or message center. Embodiments of the invention 
may also be adapted to provide secured messaging in 
network environments that incorporate legacy or existing 
systems. 

[0013] Consistent with embodiments of the invention, a 
method is provided for secured messaging. The method 
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includes: receiving, over a first secured communications 
channel, a message from a customer at a customer location; 
translating the message from the customer location into an 
e-mail, the e-mail being addressed to an address that is 
accessible by a message center through a legacy messaging 
system; retrieving, at the message center, the e-mail through 
the legacy messaging system; preparing, at the message 
center, a reply e-mail that includes a response to the message 
from the customer location; retrieving, over a second 
secured communications channel, the reply e-mail from the 
legacy messaging system; and translating the reply e-mail 
into a message format that can be presented to the customer 
at the customer location. 

[0014] Consistent with yet additional embodiments of the 
invention, a system is provided for secured messaging 
between a customer and a message center. The system 
includes: means for receiving a message from the customer 
at a customer location; means for translating the message 
from the customer location into an e-mail, the e-mail being 
addressed to a mailbox address that is accessible by the 
message center through a legacy messaging system; means 
for retrieving, at the message center, the e-mail through the 
legacy messaging system; means for preparing, at the mes- 
sage center, a reply e-mail that includes a response to the 
message from the customer location; means for retrieving, al 
an applications server, the reply e-mail from the legacy 
messaging system; and means for translating the reply 
e-mail into a message format that can be presented to the 
customer at the customer location. 

[0015] Other embodiments of the invention provide a 
method for provide secure messaging between a plurality of 
customers and a message center. Such methods include: 
providing a Web site that is accessible over the Internet, the 
Web site including at least one message input screen; 
receiving, as part of a secure messaging session with a 
customer location, a message from a customer entered 
through the at least one message input screen; forwarding, as 
part of a secure Hypertext Transfer Protocol (HTTPS) 
request, the message of the customer to an applications 
server; constructing, at the appHcations server, an e-mail 
containing the message of the customer, the e-mail being 
addressed to a private mailbox address that is accessible by 
the message center; and examining, at the message center, 
the e-mail constructed by the applications server and gen- 
erating a reply e-mail, the reply e-mail including a reply to 
the message of the customer, 

[0016] Systems for providing secure messaging may also 
be implemented, consistent with the invention. Such sys- 
tems may include: a Web server connected to a plurality of 
customer locations over a public communications network, 
the Web server being adapted to receive a message from a 
customer during a secure messaging session with one of the 
plurality of customer locations; an applications server con- 
nected to the Web server and adapted to receive the message 
from the customer during a secure messaging session with 
the Web server; and a private e-mail system connected to the 
applications server and a message center, 

[0017] In response to the message from the customer, the 
applications server may be adapted to: construct an e-mail 
containing the message of the customer, the e-mail being 
addressed to a private mailbox address that is accessible by 
the message center through the private e-mail system; 



retrieve, through the private e-mail system, a reply e-mail 
generated by the message center, the reply e-mail including 
a reply to the message of the customer; and translate the 
reply e-mail into a message format that can be presented to 
the customer at the customer location, 

[0018] Consistent with additional embodiments of the 
invention, systems may be provided for secure messaging. 
These systems may include: a Web server adapted to receive 
a message from a customer during a secure messaging 
session with a customer location; an applications server 
connected to the Web server and adapted to receive the 
message from the customer during a secure messaging 
session with the Web server; and a messaging system 
connected to the applications server and a message center. 

[0019] In response to the message from the customer, the 
applications server may be adapted to: construct an e-mail 
containing the message of the customer, the e-mail including 
a data header with customer information and message han- 
dling information; forward the e-mail to an address that is 
accessible by the message center through the messaging 
system; retrieve, through the messaging system, a reply 
e-mail generated by the message center, the reply e-mail 
including a reply to the message of the customer; and 
translate the reply e-mail into a message format that can be 
presented to the customer at the customer location. 

[0020] It is to be understood thai both the foregoing 
general description and the following detailed description 
are exemplary and explanatory only, and should not be 
deemed restrictive of the full scope of the invention, as 
claimed herein, 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0021] The accompanying drawings, which are incoipo- 
rated herein and constitute a part of this specification, 
illustrate various features and aspects of embodiments of the 
invention. In the drawings: 

[0022] FIG. 1 illustrates an exemplary system environ- 
ment for providing secured messaging, consistent with 
embodimenls of the invention; 

[0023] FIG. 2 is an exemplary flowchart of a method for 
providing secured messaging, consistent with embodiments 
of the invention; 

[0024] FIG. 3 illustrates another exemplary system envi- 
ronment for providing secured messaging, consistent with 

embodiments of the invention; 

[0025] FIG. 4 is another exemplary flowchart for provid- 
ing secured messaging, consistent with embodiments of the 

invention; 

[0026] FIG. 5 is an exemplary data header that may be 
included in an e-mail message constructed by an appHca- 
tions server, consistent with embodiments of the invention; 

[0027] FIG. 6 is an exemplary reply e-mail returned by a 
message center, consistent with embodiments of the inven- 
tion; and 

[0028] FIG. 7 is an exemplary reply message presented to 
a customer, consistent with embodiments of the invention. 

DETAILED DESCRIPTION 
[0029] Embodiments of the present invention provide 
secured messaging in a communications network environ- 
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menl. The network environment may include public com- 
munication channels or networks, such as the Internet., 
Embodiments of the invention may be implemented to 
facilitate secured electronic messaging between any combi- 
nation of entities, such as one or more customer locations 
and a message center. Consistent with embodiments of the 
invention, arrangements may be provided to permit the 
servicing of customers within a network environment that 
integrates legacy systems associated with a message center. 

[0030] FIG. 1 illustrates an exemplary system environ- 
ment for providing secured messaging, consistent with 
embodiments of the invention. As illustrated in FIG. 1, a 
number of components may be provided, including a cus- 
tomer location 100, a communications network 120, an 
applications server 140 and a message center 160„ Although 
only one customer location 100 is illustrated in FIG. 1, any 
number of customer locations may be provided, with each 
customer location having access to or connectivity with 
communications network 120. Further, while only one com- 
munications network 120, one applications server 140, and 
one message center 160 is illustrated in FIG. 1, these 
components can be provided in any number or quantity, 
depending on the needs and requirements of the system 
environment. 

[0031] Each customer location 100 represents the location 
of a customer who communicates with message center 160 
through communications network 120 and applications 
server 140. As used herein, the term "customer" encom- 
passes not only potential or actually customers of a com- 
pany, but also partners, suppliers, clients, employees and 
other related entities of the company. Message center 160 
may be staffed with customer service representatives or 
agents for the purposes of responding to messages from 
customers, providing information on products or services, 
and/or providing information concerning a customer's 
account (if applicable). Message center 160 may be provided 
for or operated by a company or business entity that provides 
goods or services to customers. For example, the company 
or business entity may be a financial institution that offers 
financial products or services to customers, such as savings 
accounts, checking accounts, credit card accounts, loans, 
investment services, accounting services and/or other types 
of financial products or services, 

[0032] In FIG. 1, customer location 100 may include 

electronic communication equipment to access or connect to 
communications network 120. By way of non-limiting 
examples, customer location 100 may include a personal 
computer, a workstation or a laptop computer that is con- 
figured with a modem or other communication hardware for 
establishing a dial-up or permanent connection with com- 
munications network 120. Customer location 100 may also 
include a mobile or wireless phone, a personal digital 
assistant (PDA) or any other type of handheld device that is 
capable of estabUshing a wireless and/or wired connection 
with communications network 120. Further, the communi- 
cation equipment at each customer location 100 may include 
communication software and other applications (such as a 
browser application and/or e-maU software) to facilitate 
communications, messaging and/or accessing of informa- 
tion over communications network 120. 

[0033] Consistent with embodiments of the invention, 
communications network 120 may comprise any combina- 



tion of technology and/or components for providing elec- 
tronic communication with each customer location 100. For 
electronic or on-line communication, communications net- 
work 120 may comprise any combination of wired or 
wireless technologies and/or communication networks, such 
as an intranet, the public Internet and/or a public switched 
telephone network (PSTN)., Local-loop systems, gateway 
and/or service providers (such as Internet Service Providers 
(ISP)) may also be provided as part of communications 
network 120 to facilitate connectivity and/or communication 
services for each customer location 100, 

[0034] Applications server 140 is provided to receive, 
translate and/or coordinate messages between customer 
location 100 and message center 160. Applications server 
140 may be implemented with a server or computer-based 
platform and may include communication hardware and 
software. Software may also be provided with applications 
server 140 to provide one or more levels of security between 
communications network 120 and message center 160, such 
as a company or private firewall Alternatively, applications 
server 140 may be provided as part of a corporate or private 
network, that is isolated or secured from communications 
network 120 through a firewall. Additionally, applications 
server 140 may be provided with a database for storing 
customer information and message content information, 

[0035] As indicated above, message center 160 may be 
staffed with customer service representatives or agents for 
the purposes of providing customer service features, such as 
responding to messages from customers, providing infor- 
mation, and performing other customer service functions. 
Message center 160 may include a number of components, 
such as user terminals that are operated by customer service 
agents. The user terminals may include computer-based 
workstations for accessing information requested by cus- 
tomers. Legacy messaging systems, which permit the send- 
ing and receiving of e-mail or other electronic messages, 
may also be provided as part of message center 160., Legacy 
systems, such as a corporate or private e-mail system, may 
be accessible by applications server 140 and user terminals 
of message center 160 a over secure communications net- 
work or secure communication links to permit the sending 
and receiving of e-mail or other electronic messages. By 
way of a non-limiting example, legacy messaging systems 
may be provided as part of a corporate or private network 
along with message center 160 and/or applications server 
140. Consistent with embodiments of the invention, legacy 
messaging systems may also be hosted or implemented at 
separate location(s) from message center 160, with connec- 
tivity between these systems being provided through a 
secure communication network or channel, such as a local 
area network or a virtual private network. 

[0036] FIG. 2 is an exemplary flowchart for providing 
secured messaging, consistent with embodiments of the 
invention. The features of FIG. 2 may be used to facilitate 
secured messaging between any combination of entities, 
such as one or more customer locations and a message 
center As illustrated in FIG. 2, the process begins with a 
customer submitting a message (step S.20), For example, a 
customer at customer location 100 may electronically sub- 
mit a message using communications network 120, The 
message may be directed to message center 160 and include 
any combination or number of questions and/or requests for 
information. The message from customer location 100 may 
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be electronically sent over communications network 120 and 
received by applications server 140 using a secure commu- 
nications channel 182 (see FIG. 1). This secure communi- 
cations channel may be provided in a number of different 
ways, 

[0037] For example, if communications network 120 is 
implemented using the Internet, a Web site may be estab- 
lished to accept messages from customer location 100 and 
submit them to applications server 140. For this purpose, a 
Web server may be provided separately or as part of com- 
munications network 120, or could be implemented as part 
of applications server 140. Such a Web server may host the 
Web site, which may be a company Web site or a Web site 
operated by a third party on~behalf of the company. The 
content of the Web site may be stored entirely or in part on 
the Web server and/or applications ser\^er 140. 

[0038] To provide security and restrict access, the Web site 
may require each customer to log-in or go through an 
authentication process before submitting a message. For 
example, a customer at customer location 100 may be 
required to provide authenticating information such as a 
valid password, account number and/or usemame or ID, 
Alternatively, the log-in or authentication process could be 
automated by, for example, using software that causes 
customer location 100 to automatically provide the neces- 
sary log-in or authentication information to the Web server. 
After successfully logging in, a message input screen may be 
displayed by the customer's browser Using the message 
input screen, a customer may then submit a message or 
question from customer location 100 to the Web server. 

[0039] Consistent with embodiments of the invention, one 
or more different message input screens may be presented to 
the customer depending on the type of question or informa- 
tion requested by the customer For example, one message 
input screen may be provided to facilitate customers in 
requesting information concerning their account with a 
company, while other message input screens may be pro- 
vided to facilitate customers in requesting general informa- 
tion concerning products or services of a company. A menu 
screen may also be provided to a customer to facilitate the 
selection and display of the proper message input screen(s). 
By using different message input screens, customer mes- 
sages may be submitted and responded to more efiSciently 
and with less errors or confusion. 

[0040] Communication between the customer's browser 
and the Web server may follow a request/response paradigm 
involving Hypertext Transfer Protocol (HTTP), When an 
HTTP request is made by the browser (such as to view a Web 
page), the Web server provides a response (such as providing 
an HTML, file to permit the Web page to be displayed by the 
browser). Thus, when a message input screen is completed 
by a customer, the content of the entered message may be 
sent as part of an HTTP request from the customer's 
browser. To transmit data between customer location 100 
and the Web server, a secure messaging session may be 
estabhshed between the customer's browser and the Web 
server in accordance with a secure sockets layer protocol, 
such as HTTPS. Encrypted messages received from cus- 
tomer location 100 may be forwarded by the Web server to 
applications server 140„ If necessary, communication 
between the Web server and applications server 140 may 
also be established using HTTPS or another protocol pro- 
viding sufficient security. 



[0041] Other arrangements may be provided for establish- 
ing secure communications channel 182 between customer 
location 100 and appHcations server 140. For example, a 
direct connection may be made between customer location 
100 and applications ser\'er 140 over a PSTN or other public 
communications network. In such a case, customer location 
100 can include applications software for dialing-up and 
connecting with applications server 140, as well as perform- 
ing authentication and message encryption routines. The 
application software may also generate one or more message 
input screens to facilitate the entry of messages or questions 
by a customer. Alternatively, customer messages may be 
submitted to appHcations server 140 using an e-mail system. 
For instance, customer location 100 may submit messages 
addressed to a mailbox accessible by applications server 
140. For this purpose, an e-mail server may be provided as 
part of communications network 120. In addition, if a 
conventional, public e-mail system is used, then customer 
messages may be sent as an encrypted file attached to an 
e-mail. In such cases, various encryption techniques may be 
used, such as encryption algorithms based on public-private 
key arrangements. 

[0042] Referring again to FIG. 2, after a message is 
submitted by customer location 100 (step S.20), the message 
is received and translated by applications server 140 (step 
S.22). Applications server 140 may perform one or more 
translation routines.. For example, if the customer message is 
received in an encrypted form, applications server 140 may 
decrypt the message. Thereafter, applications server 140 
may translate the message so that it may be accessed by 
message center 160. For this purpose, applications server 
140 may translate the message into a format that is acces- 
sible through an existing or legacy messaging center used by 
message center 160, For example, if the legacy messaging 
system is a corporate or private e-mail system, then appli- 
cations server 140 may generate an e-mail based on the 
customer's original message, with the e-mail being 
addressed to a mailbox address accessible by message center 
160 through the private e-mail system. 

[0043] The e-mail message generated by applications 
server 140 may incorporate the original message content 
submitted by the customer Further, to facilitate proper 
handhng of the customer's message, applications server 140 
may incorporate other information into the e-mail message 
using, for example, data headers or character strings. The 
data headers or character strings may have a predefined 
format and can be included in any part of the e-mail 
message, such as the subject line or message field of the 
e-mail. The information incorporated by applications server 
140 may include, for example, relevant customer informa- 
tion (such as a customer name or ID, and/or a customer 
account number). The customer information may be gath- 
ered based on information entered by the customer during an 
authentication process and/or may be collected from a 
customer database. Messaging handling information may 
also be includes using, for example, a message code or 
trigger in the subject line or message body of the e-mail. 
Such a message code or trigger may identify the type of 
message submitted by a customer (based on, for example, 
the type of message input screen used) and/or the priority 
level of the message (based on, for example, the status of the 
customer, the date of the original message, the type of 
message submitted by the customer, etc.).. Consistent with 
embodiments of the invention, customer information and 
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message handling information may also be provided in a file 
(such as a text file) that is sent as an attachment with the 
e-mail generated by applications server 140. 

[0044] Each of translated message is then reviewed by 
message center 160 (step S.24). To retrieve and review a 
customer message, a secure communications channel 192 
(see FIG. 1) is established between applications server 140 
and message center 160, Secure communications channel 
192 may be implemented in a number of different ways. For 
example, the translated customer message may be sent by 
applications server 140 to a legacy messaging system using 
a secure, private or local area network or a virtual private 
network^ The legacy messaging system, such as a corporate 
or private e-mail system, may be provided as part of 
message center 160 or provided at a separate location„ A 
corporate or private e-mail system may be an internal e-mail 
system that is generally not accessible to the public or 
through public communications networks. Customer service 
representatives of message center 160 may access the legacy 
messaging system to retrieve and review the customer 
message using a dedicated, internal communication link or 
a secure, local area network. Alternatively, applications 
server 140 may forward the translated customer messages 
directly to the existing messaging system or customer agent 
workstations of message center 160 using a secure, dial-up 
or permanent communication link. 

[0045] Customer service representatives may poll or 
review customer messages on a periodic basis If customer 
information is provided with a customer message, then the 
customer information may be used by the customer service 
representatives to access information (such as customer 
account information) and/or determine an appropriate reply 
to the customer message. Further, if a message code or 
trigger is provided with a customer message, then the 
message code or trigger may be interpreted by the customer 
service agent to determine how to respond to the message. 
In addition, based on the specific nature of the customer's 
inquiry or the reply from the message center, a customer 
service representative may determine to update or change 
the message code or trigger. In any event, each of the 
translated customer messages from applications server 140 
may be reviewed and replied to by message center 160. As 
part of this process, a reply message is prepared by message 
center 160 (step S.26) 

[0046] Consistent with embodiments of the invention, 

reply messages may be prepared by message center 160 
using one or more legacy messaging systems. For example, 
customer service representatives may prepare a reply mes- 
sage to a customer using an existing corporate or private 
e-maU system.. The reply message may include, for example, 
information requested by a customer and/or an answer to a 
question submitted by a customer. Information or answers 
provided in the reply message may contain confidential 
and/or non-confidential information. In addition, the cus- 
tomer's original message may be included as part of the 
reply message, as well as the relevant customer information 
(such as a customer name or ID, and/or a customer account 
number). 

[0047] Reply messages generated by message center 160 
may be forwarded to or retrieved by applications server 140„ 
For example, using secure communications channel 192 (see 
FIG. 1), reply messages may be forwarded to or retrieved by 



applications ser\^er 140. In such cases, a customer service 
representative may send a reply message using the existing 
messaging system associated with message center 160. The 
reply message may be addressed to a mailbox address 
accessible by applications server 140- Applications server 
140 may retrieve reply messages from the legacy messaging 
system through, for example, a secure, dial-up or permanent 
communication link, a private network or a virtual private 
network.. Alternatively, the legacy messaging system may 
forward the reply message directly to applications server 
140 using a secure, dial-up or permanent communication 
link or virtual private network. 

[0048] Reply messages from message center 1 60 are trans- 
lated by applications server 140 into a message format that 
can be presented to individual customers (step S.28). Reply 
messages may be translated in a number of different ways. 
For example, if customers are permitted to view reply 
message through a Web site, then applications server 160 
may construct an HTML file to present the content of the 
reply message as part of a display screen generated by the 
customer's browser. Each HTML file may be indexed and 
stored in a database of applications server 140 according to 
customer identification information (customer name or ID, 
and/or customer account number). As part of step S.28, 
applications server 140 may generate an e-mail or post a 
message at a Web site to notify the customer that a reply 
from message center 160 is available. The customer at 
customer location 100 may then log on the Web site (if the 
customer is not already authenticated on the Web site) and 
request to view the reply message. In response to the request, 
applications server 140 may retrieve and forward the HTML 
file containing the content of the reply message to the Web 
server, which in turn would forward the HTML file to 
customer location 100. Using the HTML file, the customer's 
browser would display the reply message content to the 
customer. To provide security, a secure messaging session 
may be established between customer location 100 and the 
Web server using a protocol such as HTTPS. As indicated 
above, HTTPS or another suitable protocol may also be used 
to transfer files between the Web server and applications 
server 140. 

[0049] If message triggers or codes are provided in the 
reply e-mail, then applications server 140 may review and 
remove the message handling information from the reply 
provided to the customer The message handling information 
may examined by applications server 140 to determine the 
final values for the trigger or codes (for example, if updates 
were made by the message center) and, thus, the proper 
handling for the reply. For example, message trigger or code 
values may indicate the method by which the customer is to 
be notified and/or presented with the reply from the message 
center. 

[0050] In addition to using the Web, other arrangements 
for providing the reply message to the customer may be used 
depending on the type of secure communications channel 
182 established between customer location 100 and appli- 
cations server 140, For example, if a direct connection is 
made between customer location 100 and applications server 
140 over a PSTN or another type of public communications 
network, then the reply message may be encrypted by 
applications server 140 and sent in a file format (such a text 
file) that may be opened and viewed by customer location 
100. Alternatively, reply messages may be forwarded by 
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applications server 140 using an e-mail system For instance, 
applications server 140 may send the reply message to a 
mailbox accessible by customer location 100, If a conven- 
tional, public e-mail system is used, then the reply message 
may be sent by applications server 140 as an encrypted file 
attached to an e-oaail addressed to the customer. 

[0051] As indicated above, embodiments of the invention 
provide secured messaging in a communications network 
environment, such as the Internet, Systems and methods 
consistent with the embodiments of the invention may be 
implemented to facilitate messaging of both confidential and 
non-confidential information. Such systems and methods 
may also be adapted to permit a message center to provide 
customer service in an environment that integrates legacy 
messaging systems of a message center 

[0052] Referring now to FIG. 3, another exemplary sys- 
tem environment is illustrated, consistent with embodiments 
of the invention. The exemplary system environment of 
FIG. 3 may be adapted for use by a company that provides 
customer service features to its customers,, For purposes of 
illustration, the exemplary system environment of FIG. 3 
and the related, exemplary method of FIG. 4 will be 
described with reference to a financial company that pro- 
vides financial products or services to customers, such as 
credit card accounts. It will be appreciated, however, that the 
examples of FIGS. 3 and 4 may be adapted for use by 
customers of other products or services, as well as dijfferent 
types of companies that offer customer service features, 

[0053] As illustrated in FIG. 3, a number of components 
may be provided in the exemplary system environment. For 
example, the system environment may include one or more 
customer locations 302, a communications network 300, a 
Web server 360, an applications server 340, a legacy mes- 
saging system 320 and a message center 380„ Although two 
customer locations 302 are illustrated in FIG, 3, any number 
of customer locations may be provided, with each customer 
location having access to or connectivity with communica- 
tions network 300. Further, while one communications net- 
work 300, one Web server 360, one applications server 340, 
one legacy messaging system 320 and one message center 
380 is illustrated in FIG. 3, these components may be 
provided in any number or quantity, depending on the needs 
and requirements of the system environment. 

[0054] Similar to customer locations 100 of FIG.l, each 
customer location 302 of FIG. 3 represents the location of 
a customer who communicates with message center 380 
through communications network 300. In the exemplary 
system environment of FIG. 3, the term "customer" encom- 
passes not only potential or actually customers of a com- 
pany, but also partners, suppliers, chents, employees and 
other related entities of the company. Message center 380 
includes one or more user terminals 382 that are staffed with 
customer service representatives or agents for the purposes 
of responding to messages from customers, providing infor- 
mation on products or services, and/or providing informa- 
tion concerning a customer's account (if appHcablc). By way 
of a non-limiting example, message center 380 may be 
provided for or operated by a financial company or business 
entity that provides financial products or services to cus- 
tomers. For example, the financial company or business may 
provide one or more different types of credit card accounts 
to customers. 



[0055] To access or connect to communications network 
300, customer location 302 may include suitable communi- 
cation equipment. By way of non-limiting examples, cus- 
tomer location 302 may include a personal computer, a 
workstation or a laptop computer that is configured with a 
modem or other communication hardware for establishing a 
dial-up or permanent connection with communications net- 
work 300. Customer location 302 may also include a mobile 
or wireless phone, a personal digital assistant (PDA) or any 
other type of handheld device that is capable of establishing 
a wireless and/or wired connection with communications 
network 300. Further, the communication equipment at each 
customer location 302 may include communication software 
and other applications (such as a browser application and/or 
e-mail software) to facilitate communications, messaging 
and/or accessing of information over communications net- 
work 300. 

[0056] Communications network 300 facifitates commu- 
nication between client locations 302 and the other system 
components of FIG. 3 For this purpose, communications 
network 300 may include any combination of technology 
and/or components for providing electronic communication. 
For example, communications network 300 may comprise 
any combination of wired or wireless technologies and/or 
communication networks, such as an intranet, the public 
Internet and/or a public switched telephone network 
(PSTN), Local-loop systems, gateway and/or service pro- 
viders (such as Internet Service Providers (ISPs)) may also 
be provided as part of communications network 300 to 
facilitate connectivity and/or communication services for 
each customer location 302, 

[0057] Web server 360 hosts one or more Web sites that 
are accessible to customer locations 302. Each Web site may 
be a company Web site, or a Web site that is operated by a 
third party on behalf of the company. The Web site may 
include a secure messaging portal or center for customers of 
the company to submit and receive messages. The content of 
each Web site may be stored entirely or in part on the Web 
server 360 and/or applications server 340. As further 
described below, a Web site may be provided to facilitate the 
submission of messages by customer locations 302 and the 
retrieval of reply messages firom message center 380, 
Although FIG. 3 illustrates Web server 360 as being con- 
nected to communications network 300, Web server 360 
may actually form part of the infrastructure for communi- 
cations network 300. 

[0058] Applications server 340 facilitates integration of 
legacy messaging system 320. Applications server 340 may 
be implemented with a server or computer-based platform 
and may include communication hardware and software. 
Software may also be provided with applications server 340 
to perform message handling and routing functions, such as 
those described below in connection with FIG. 4. In addi- 
tion, applications server 340 may include software to pro- 
vide one or more levels of security between communications 
network 300 and message center 380, such as a company or 
private firewall. Alternatively, applications server 340 may 
be provided as part of a corporate or private network, that is 
isolated or secured from communications network 300 
through a firewall. Additionally, applications server 340 may 
also be provided with a database for storing customer 
information (such as customer name, account number(s), 
e-mail address, etc.) and message information. 
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[0059] The exemplary system environment of FIG. 3 may 
include one or more legacy messaging systems 320, By way 
of a non-limiting example, legacy messaging system 320 
may be a corporate or private e-mail system or other type of 
electronic messaging system. The corporate or private 
e-mail system may be an internal e-mail system that is part 
of a corporate or private network and generally not acces- 
sible to the public or through public communications net- 
works. Alternatively, the corporate or private e-mail system 
may be hosted externally, with access to the system being 
provided through a secured communication link or network, 
such as a virtual private network. The corporate or private 
e-mail system may incorporate functions to facilitate mes- 
sage tracking, categorization and handling by message cen- 
ter 380. Examples of commercially available e-mail or 
messaging systems include Kana Response, available iSrom 
Kana Communications, Inc. of Redwood City, Calif 

[0060] As illustrated in FIG. 3, message center 380 may 
include one or more user terminals 382. User terminals 382 
may be staffed with customer service representatives or 
agents for providing customer service features, such as 
responding to messages from customers, providing infor- 
mation, and performing other customer service functions. 
Each of the user terminals 382 may include computer-based 
workstations or terminals for sending and/or receiving mes- 
sages through legacy messaging system 320^ User terminals 
382 may also be connected to a corporate database server for 
accessing and retrieving information requested by custom- 
ers. Connectivity between user terminals 382 and legacy 
messaging system 320 and the corporate database server 
may be provided through a secure, direct communication 
link or private communication network, such as a local area 
network. 

[0061] FIG. 4 illustrates an exemplary flowchart for pro- 
vidiDg secured messaging, consistent with embodiments of 
the invention. The features of FIG. 4 may be used to 

facilitate secured messaging between entities in the exem- 
plary system environment of FIG. 3, such as customer 
locations 302 and message center 380. The exemplary 
process of FIG. 4 begins with a customer logging onto a 
Web site (step S.40). As indicated above, the Web site may 
be established by a company to accept and handle messages 
from customer locations 302. The Web site may be hosted by 
Web server 360, with the content of the Web site being 
stored entirely or in part on Web server 360 and/or appli- 
cations server 340, 

[0062] Using a browser, each customer location 302 may 
connect to the Web site through communications network 
300. Once connected to the Web site, a customer may be 
required to log-in or go through an authentication process 
before being able to submit messages to message center 380. 
For example, customer location 302 may be required to 
provide authenticating information such as a valid password, 
account number and/or username or ID. Alternatively, the 
log-in or authentication process could be automated by, for 
example, using software that causes customer location 100 
to automatically provide the necessary log-in or authentica- 
tion information to the Web server 

[0063] After logging on to the Web site, the authenticated 
customer may then submit a message using the browser at 
customer location 302 (step S.44) The message include any 
combination or number of questions and/or requests for 



information.. To facilitate the entry of messages, a message 
input screen may be generated by the customer's browser. 
For this purpose, an HTML, file for generating a message 
input screen may be provided by Web server 360 to customer 
location 302. A generic message input screen may be pro- 
vided for all messages submitted by a customer. The generic 
input screen may include a subject select field to permit the 
customer to indicate the nature of his/her inquiry, and a 
comment field to enter the content of the message. Alterna- 
tively, depending on the type of question or information 
requested by the customer, specific message input screens 
may be generated by the customer's browser. For example, 
one message input screen may be provided to facilitate the 
customer in requesting information concerning their credit 
card account, while other message input screens may be 
provided to facilitate the customer in requesting general 
information concerning financial products or services of the 
company. If different message input screens are available, a 
menu screen may be displayed to the customer to facilitate 
the ultimate selection and display of the proper message 
input screen(s) by the customer's browser. 

[0064] Once the message input screen is completed, the 
customer may submit the message (for example, by select- 
ing a SEND or SUBMIT button). As part of this process, the 
information entered through the message input screen may 
be sent as part of an HTTP request from the customer's 
browser to Web server 360. To transmit the message infor- 
mation between customer location 302 and Web server 360 
in a secured fashion, a secure messaging session may be 
established between the customer's browser and Web server 
360 in accordance with a secure sockets layer protocol, such 
as HTTPS. Web server 360 may forward the HTTP request 
to applications server 340 for further processing. If neces- 
sary, communication between Web server 360 and applica- 
tions server 340 may also be established using HTTPS or 
another protocol providing sufficient security. 

[0065] Referring again to FIG. 4, after the message infor- 
mation is submitted by customer location 302 (step S.44), 
applications server 340 may generate an e-mail for message 
center 380 based on the message information and relevant 
customer information (step S.48), For example, the subject 
field for the e-mail may be populated with the message type 
or subject selected by the customer. Further, the "to" address 
for the e-mail may be a mailbox address of message center 
380 that is accessible through legacy messaging system 320. 
The "firom" address for the e-mail may be the customer's 
username or Web ID (such as an on-line Web servicing ID) 
with a domain associated with applications server 340. The 
body of the e-mail may contain the message content or text 
information entered by the customer. The body of the e-mail 
may also include data or message headers to facilitate 
handhng of the e-mail 

[0066] FIG. 5 illustrates an exemplary data header that 
may be included in the e-mail messages constructed by 
applications server 340 As illustrated in FIG. 5, the data 
header includes a character string ("-t^-SecuredHeader") 
that initializes and closes the data header. The data header 
may include information that are used by customer service 
representatives at message center 380 in order to determine 
how to handle and/or respond to the customer's message, 
lliis information may include customer information (such as 
an Internet customer ID (ICID), a customer's name, cus- 
tomer account number(s), a customer's personal e-mail 
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address, etc.), as well as marketing or response information 
(such as Response Channel Type, Cross Sell Type, etc.). 
Relevant customer information may be gathered based on 
the information provided by a customer during an authen- 
tication process and/or accessed from a customer database. 
Marketing or response information may be incorporated into 
the e-mail by application server 340 based on numerous 
factors, such as the type of inquiry or message submitted by 
the customer, the status of the customer, the type of products 
or services requested by the customer, etc. 

[0067] As further described below, the data header may 
also include message triggers (such as Intercept, Notify, 
Accept) which are set to initial values by applications server 
340 to indicate handling instructions for the customer's 
message. These message triggers may be changed or 
updated to different values when the message is reviewed at 
message center 380. For example, a customer service rep- 
resentative may determine that an initial value of a message 
trigger is improper based on the type of message or reply to 
be provided to the customer and may update the message 
trigger value to provide proper notification and/or handling 
of the reply for the customer 

[0068] After constructing the e-mail message, appHcations 
server 340 will forward the e-mail to legacy messaging 
system 320. A secure, direct communication link or private 
network (such as a local area network) may be used to 
forward the e-maO from applications server 340 to legacy 
messaging system 320- The e-mail may be sent to a general 
mailbox address for message center 380. Alternatively, alias 
addresses may be defined for different categories of mes- 
sages. Alias addresses may be formed from a combination of 
a codeword representing the message input screen type or 
subject selected by the customer and a domain associated 
with message center 320. Consistent with embodiments of 
the invention, a set of alias addresses may be defined for 
customer's messages related to confidential information 
(such as questions related to a customer's credit card 
account) as well as customer's messages related to non- 
confidential information (such as an inquiry for application 
information for a financial product or service of the com- 
pany, or a request a^ncerning job openings with the com- 
pany)„ The use of alias addresses may permit e-mails 
received by legacy messaging system 320 to be routed to the 
appropriate group or set of customer service representatives 
at message center 380. 

[0069] Referring again to FIG. 4, e-mails constructed by 
applications server 340 are reviewed by message center 380 
(step S.52). To retrieve and review a customer message, a 
secure communications channel is established between 
applications server 340 and message center 380., For 
example, communication between each of the user terminals 
382 and legacy messaging system 320 may be estabhshed 
using a secure, direct communication link or a private 
network, such as local area network. With such a secure 
communications channel, customer service representatives 
at message center 380 may access legacy messaging system 
320 through user terminals 382 to retrieve and review 
e-mails containing a customer's original message. 

[0070] When reviewing an e-mail, a customer service 
representative may examine the content of the customer's 
original message to determine the nature of the inquiry The 
customer service representative may also inspect the data 



header created by applications server 340 to identify the 
customer, access customer account information and/or deter- 
mine how the message should be handled„ As indicated 
above, message triggers can also be included in the data 
header with values initialized by appHcations server 340. 
Such message triggers may be used to categorize the cus- 
tomer's message and/or provide message handling instruc- 
tions. By way of non-limiting examples, message triggers 
and associated trigger values may be defined as follows: 

[0071] INTERCEPT— Determines whether or not the cus- 
tomer will be notified of a reply message at the time of 
authentication into the Web site. If this value is required, the 
customer is required to read the reply message in order to 
proceed to other pages in the Web site. Exemplary INTER- 
CEPT values: 0<anone; l=suggested intercept; and 2=re- 
quired intercept, 

[0072] NOTIFY^Indicates whether or not a notification 
message will be sent to the customer's personal e-mail 
address to indicate that a reply message is available. Exem- 
plary NOTIFY values: 0=no notification; 1-send notifica- 
tion e-mail to customer, 

[0073] ACCEPT— Specifies whether or not an Acceptance 
of Terms prompt will be presented to the customer following 
the review of the message Exemplary ACCEPT values: 
0=no acceptance of prompt required; 1 -acceptance of terms 
prompt required. 

[0074] After each e-mail is reviewed at message center 
380, a customer service representative will formulate a 
response and generate a reply e-mail (step S.56). The reply 
e-mail is forwarded by message center 380 to legacy mes- 
saging system 320 using a mailbox address that is accessible 
by applications server 340. FIG. 6 illustrates an exemplary 
reply e-mail, consistent with embodiments of the invention. 
As illustrated in FIG. 6, the reply e-mail may include the 
original message from the customer, as well as a message 
header that contains the reply message from a customer 
service representative. The data header created by applica- 
tions server 340 is also maintained in the reply e-mail. 
However, the initial values of the message triggers may 
change based on new data headers added to the reply. This 
may occur if the customer service representative decides to 
change or update the value or uses a message template which 
includes a message header with a predefined trigger value. 
In the exemplary reply e-mail of FIG. 6, a message header 
is used with a INTERCEPT trigger. This trigger will set the 
value for INTERCEPT to "01" when the reply e-mail is 
processed by applications server 340. 
[0075] Each reply e-mail sent to legacy messaging system 
320 is retrieved and processed by applications server 340, To 
determine the proper handling for the reply, applications 
server 340 may parse the message trigger values in the data 
headers by scanning the reply e-mail from top to bottom,, 
The first instance of each trigger may be used by applica- 
tions server 340 to set the trigger value. After parsing, 
applications server 340 will strip or remove all data headers 
from the text body of the reply e-mail, and prepare an HTML, 
file so that the reply message can be presented to the 
customer through the Web. Alternatively, if the original 
message and reply relate to non-confidential information, an 
e-mail may be constructed from the reply message and sent 
to a personal e-mail address of the customer. 
[0076] After the reply e-mail is processed by applications 
server 340, notification is sent to the customer that a reply 
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is available (step S 60). As indicated above, message trig- 
gers may be provided to indicate how notification is sent to 
the customer by applications server 340. Thus, for example, 
the set trigger values may indicate that notification be sent 
to the customer's personal e-mail address. Alternatively, the 
set trigger values may indicate that notification be presented 
to the customer the next time the customer logs in and is 
authenticated through the Web site. 

[0077] After receiving notification, the customer al cus- 
tomer location 302 may log on the Web site (if the customer 
is not already logged and authenticated on the Web site) and 
retrieve the reply message (step S.64), As part of this 
process, applications server 340 may retrieve and forward 
the HTML file containing the content of the reply message 
to Web server 360 In turn, Web server 360 forwards the 
HTML file to customer location 302 and, using the HTML 
file, the customer's browser can display the reply message. 

[0078] By way of a non-limiting example, FIG. 7 illus- 
trates an exemplary reply message that may be displayed 
with a customer's browser. As shown in the FIG. 7, the reply 
message text jfrom the customer service representative and 
the customer's original message may be displayed to the 
customer. All data headers are removed and do not appear in 
the reply message. 

[0079] To provide security, a secure messaging session 
may be established between customer location 302 and Web 
server 360 when an HTML file containing the reply message 
is forwarded to the customer location. For this purpose, a 
protocol such as HTTPS may be used to establish a secure 
messaging session. HTTPS or another suitable protocol may 
also be used to transfer HTML files between Web server 360 
and applications server 340. 

[0080] Other embodiments of the invention will be appar- 
ent to those skilled in the art from consideration of the 
specification and practice of the invention disclosed herein. 
For example, the pre-existing or legacy messaging system 
may incorporate templates that can be used by customer 
service representatives to construct a reply message to 
customers. Alternatively, reply messages from service rep- 
resentatives may be composed using free form text entered 
using the legacy messaging system. 

[0081] In addition, the invention is not limited to the 
particulars of the embodiments disclosed herein. For 
example, the individual features of each of the disclosed 
embodiments may be combined or added to the features of 
other embodiments. In addition, the steps of the disclosed 
methods herein may be combined or modified without 
departing from the spirit of the invention claimed herein. For 
instance, messages may be received from both authenticated 
and non-authenticated customers. If a message is sent firom 
an authenticated customer, it can be considered confidential 
with a reply message handled according to the secured 
messaging techniques disclosed herein. In contrast, non- 
confidential messages or messages received firom non-au- 
thenticated customers may handled as general inquiries 
(such as from the public at large). In such cases, reply 
messages may be sent to a personal e-mail address of the 
entity that submitted the original message. 

[0082] Accordingly, it is intended that the specification 
and embodiments disclosed herein be considered as exem- 
plary only, with a true sajpe and spirit of the invention being 
indicated by the following claims. 



What is claimed is: 

1 . A method for providing secured messaging, the method 

comprising: 

receiving, over a first secured communications channel, a 

message from a customer at a customer location; 

translating the message from the customer location into an 
e-mail, the e-mail being addressed to an address that is 
accessible by a message center through a legacy mes- 
saging system; 

retrieving, at the message center, the e-mail through the 
legacy messaging system; 

preparing, at the message center, a reply e-mail that 
includes a response to the message from the customer 
location; 

retrieving, over a second secured communications chan- 
nel, the reply e-mail firom the legacy messaging system; 
and 

translating the reply e-mail into a message format that can 
be presented to the customer at the customer location. 
2 A method according to claim 1, wherein the step of 
receiving the message from the customer comprises: 

establishing a secure messaging session between the 
customer location and a Web server; 

generating a message input screen at the customer loca- 
tion to permit entry of the message of the customer; and 

transmitting a secure Hypertext Transfer Protocol 
(HTTPS) request from the customer location to the 
Web server, the HTTPS request including the message 
of the customer entered through the message input 
screen.. 

3. A method according to claim 2, wherein the step of 
receiving further comprises forwarding the HTTPS request 
from the Web server to an applications server 

4. A method according to claim 3, wherein the step of 
forwarding comprises establishing a secure messaging ses- 
sion between the Web server and the applications server 
using a secure sockets layer protocol. 

5. A method according to claim 3, wherein the step of 
translating the message from the customer location com- 
prises: 

constructing, at the applications server, an e-mail 
addressed to the message center, the e-mail including 
customer information and at least one message trigger 
with an initial value; and 

forwarding the e-mail addressed to the message center 
iBrom the applications server to the legacy messaging 
system, 

6. A method according to claim 5, further comprising: 

examining, at the message center, each message trigger 
provided in the e-mail to determine if the initial value 
assigned to the message trigger is proper; and 

updating, in the reply e-mail, the value of each message 
trigger if the initial value is determined to be improper. 

7. A method according to claim 6, further comprising: 

inspecting, at the applications server, the value of each 
message trigger; and 
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notifying, based on the value of each message trigger, the 
customer at the customer location that a reply from the 
message center is available. 

8. A method according to claim 1, wherein the customer 
location includes a Web browser and further wherein the 
step of translating the reply e-mail comprises constructing 
an HTML file that can be interpreted by the Web browser at 
the customer location to display the response to the cus- 
tomer. 

9. A method according lo claim 1, further comprising: 

notifying the customer at the customer location that a 
reply from the message center is available; and 

forwarding, upon request from the customer, the reply 
e-mail in the message format that can be presented to 
the customer at the customer location, 

10, A method according lo claim 1, wherein the step of 
retrieving the reply e-mail comprises: 

providing the second secured communications channel 
between the legacy messaing system and an applica- 
tions server; and 

forwarding the reply e-mail over the second secured 
communications channel from the legacy messaging 
system to the applications server. 

11, A method according to claim 10, wherein the step of 
translating the reply e-mail comprises constructing an 
HTML file that can be interpreted by a Web browser at the 
customer location to display the response to the customer. 

12, A system for providing secured messaging between a 
customer and a message center, the system comprising: 

means for receiving a message from the customer at a 

customer location; 

means for translating the message from the customer 
location into an e-mail, the e-mail being addressed to a 
mailbox address that is accessible by the message 
center through a legacy messaging system; 

means for retrieving, at the message center, the e-mail 
through the legacy messaging system; 

means for preparing, al the message center, a reply e-mail 
that includes a response to the message from the 
customer location; 

means for retrieving, at an applications server, the reply 
e-mail from the legacy messaging system; and 

means for translating the reply e-mail into a message 
format that can be presented to the customer al the 
customer location. 

13. A system according to claim 12, wherein the means for 
receiving the message from the customer comprises: 

means for establishing a secure messaging session 
between the customer location and a Web server; 

means for generating a message input screen at the 
customer location to permit entry of the message of the 
customer; and 

means for transmitting a secure Hypertext Transfer Pro- 
tocol (HTTPS) request from the customer location to 
the Web server, the HTITS request including the 
message of the customer entered through the message 
input screen. 



14. Asystem according to claim 13, wherein the means for 
receiving the message from the customer further comprises 
means for forwarding the HTTPS request from the Web 
server lo an applications server. 

15 . Asystem according to claim 14, wherein the means for 
forwarding the HTTP request comprises means for estab- 
lishing a secure messaging session between the Web server 
and the applications server using a secure sockets layer 
protocol 

16. Asystem according to claim 14, wherein the means for 
translating the message from the customer comprises: 

means for constructing, at the applications server, the 
e-mail addressed to the message center, the e-mail 
including customer information and at least one mes- 
sage trigger; and 

means for forwarding the e-mail addressed lo the message 
center from the applications server to the legacy mes- 
saging system. 

17. Asystem according to claim 12, wherein the customer 
location includes a Web browser and further wherein the 
means of translating the reply e-mail comprises means for 
constructing an HTML file that can be interpreted by the 
Web browser at the customer location to display the 
response to the customer 

18. A system according to claim 12, further comprising: 

means for notifying the customer at the customer location 
that a reply from the message center is available; and 

means for forwarding, upon request from the customer, 
the reply e-mail in the message format that can be 

presented lo the customer at the customer location» 

19. Asystem according to claim 12, wherein the means for 
retrieving the reply e-mail comprises: 

means for providing a secure communications channel 
between the legacy messaging system and an applica- 
tions server; and 

means for forwarding the reply e-mail over the secure 
communications channel from the legacy messaging 
system to ±e applications server. 

20. Asystem according lo claim 19, wherein the means for 
translating the reply e-mail comprises means for construct- 
ing an HTML, file that can be interpreted by a Web browser 
at the customer location to display the response lo the 
customer. 

21. A method for provide secure messaging between a 
plurality of customers and a message center, comprising: 

providing a Web site that is accessible over the Internet, 
the Web site including at least one message input 
screen; 

receiving, as part of a secure messaging session with a 
customer location, a message from a customer entered 
through the at least one message input screen; 

forwarding, as part of a secure Hypertext Transfer Pro- 
tocol (HTTPS) request, the message of the customer to 
an applications server; 

constructing, at the applications server, an e-mail contain- 
ing the message of the customer, the e-mail being 
addressed lo a private mailbox address that is acces- 
sible by the message center; and 
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examining, at the message center, the e-mail constructed 
by the applications server and generating a reply 
e-mail, the reply e-mail including a reply to the mes- 
sage of the customer. 

22. A method according to claim 21, wherein the reply 
e-mail is addressed to a private mailbox that is accessible by 
the applications server. 

23. A method according to claim 22, further comprising: 

forwarding, over a secure communications channel, the 
reply e-mail from the message center to the applica- 
tions server; and 

generating, at the applications server, an HTML file based 
on the reply e-mail from the message center, the HTML 
file including the reply of the message of the customer. 

24. A method according to claim 21, further comprising: 

providing a private e-maii system that is accessible to the 
applications server and the message center. 

25. A method according to claim 24, further comprising: 

forwarding, from the applications server to the private 
e-mail system, the e-mail addressed to the private 
mailbox address of the message center; and 

retrieving, at the message center, the e-mail from the 
private e-mail system- 

26 A method according to claim 24, further comprising: 

forwarding, from the message center to the private e-mail 
system, the reply e-mail addressed to the private mail- 
box address of the applications server; and 

retrieving, at the applications server, the reply e-mail from 
the private e-mail system. 

27. A method according to claim 21, further comprising: 

constructing, al the applications server, an HTML file 

based on the reply e-mail from the message center; and 

forwarding, as part of a secure messaging session with the 
customer location, the HTML file to a Web browser at 
the customer location to display the reply from the 
message center to the customer. 

28. A method according to claim 21, further comprising: 

forwarding, upon request from the customer, the reply 
e-mail in a message format that can be presented to the 
customer at the customer location. 

29. A method according to claim 21, further comprising: 

in response to the reply e-mail, notifying the customer at 
the customer location that the reply from the message 
center is available. 

30„ A system for providing secure messaging, the system 
comprising: 

a Web server connected to a plurality of customer loca- 
tions over a public communications network, the Web 
server being adapted to receive a message from a 
customer during a secure messaging session with one 
of the plurality of customer locations; 

an applications server connected to the Web server and 
adapted to receive the message from the customer 
during a secure messaging session with the Web server; 
and 

a private e-mail system connected to the applications 
server and a message center; 



wherein, in response to the customer message received 
from the Web server, the applications server is adapted 

to: 

construct an e-mail containing the message of the 
customer, the e-mail being addressed to a private 
mailbox address that is accessible by the message 
center through the private e-mail system; 

retrieve, through the private e-mail system, a reply 
e-mail generated by the message center, the reply 
e-mail including a reply to the message of the 
customer; and 

translate the reply e-mail into a message format that can 
be presented to the customer at the customer loca- 
tion. 

31. A system according to claim 30, further comprising 
means for notifying the customer at the customer location 
that the reply from the message center is available. 

32. A system according to claim 31, further comprising 
means for forwarding, upon request from the customer, the 
reply e-mail in a message format that can be presented to the 
customer at the customer location. 

33. A system according to claim 30, wherein the appli- 
cations server is adapted to translate the reply e-mail from 
the message center into an HTML file and further wherein 
the HTML file is forwarded by the Web server, as part of a 
secure messaging session with the customer location, to a 
Web browser at the customer location to display the reply 
from the message center to the customer. 

34. A system for providing secure messaging, the system 
comprising: 

a Web server adapted to receive a message from a 
customer during a secure messaging session with a 
customer location; 

an applications server connected to the Web server and 
adapted to receive the message from the customer 
during a secure messaging session with the Web server; 
and 

a messaging system connected to the applications server 
and a message center; 

wherein, in response to the message from the customer, 

the applications server is adapted to: 

construct an e-mail containing the message of the 
customer, the e-mail including a data header with 
customer information and message handling infor- 
mation; 

forward the e-mail to an address that is accessible by 
the message center through the messaging system; 

retrieve, through the messaging system, a reply e-mail 
generated by the message center, the reply e-mail 
including a reply to the message of the customer; and 

translate the reply e-mail into a message format that can 
be presented to the customer at the customer loca- 
tion. 
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intended recipient. A program module in the computer 
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e-mail address. Another program module is operative for 
providing the second e-mail address as a response to the 
query. The query response is communicated to the sender or 
to the sender's ISP so that an undeliverable message can be 
resent to the new e-mail address. Also provided are security 
and authentication measures for ensuring that address 
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SYSTEM AND METHOD FOR ELECTRONIC 
MAIL (E-MAIL) ADDRESS MANAGEMENT 

TECHNICAL FIELD 

The present invention relates generally to electronic mail 
on the Internet (also called e-mail and email), and more 
particularly relates to a system and methods for managing 
e-maii addresses to effect the delivery of e-mail messages 
when a subscriber abandons an e-mail address and obtains a 
new e-mail address, as when a subscriber changes Internet 
service providers ("ISPs")., 

BACKGROUND OF THE INVENTION 

The Internet is a collection of computers, networks, 
routers, and gateways that use the TCP/IP suite of protocols 
to connect computers all over the world. The Internet links 
computers together in a way such that they can transfer 
information to each other. Computer users often subscribe to 
communication services provided by an Internet Service 
Provider ("ISP") to access and utilize the Internet. 

One of the popular uses of the Internet is to send and 
receive electronic messages, which are often referred to as 
electronic mail or "e-mail" E-mail is a computer-to- 
computer version of interoffice mail or the postal service. 
E-mail enables computer users to send and receive messages 
over a computer network. Delivered messages are stored in 
electronic mailboxes that are assigned to users on the 
network. Messages received in a mailbox can be viewed, 
saved, or deleted by a recipient using known and popular 
electronic mail computer software such as CE Software's 
QUICKMAIL^'^S OUTLOOK^" made by Microsoft 
Corporation, EUDORA'^" made by Qualcomm, and the like. 

In order to deliver e-mail, an addressing scheme is 
required. Each computer on the Internet is assigned a 
numeric Internet protocol ("IP") address, which is a part of 
the TCP/IP protocol, The IP address in the current TCP/IP 
scheme consists of four discrete numbers, each less than 
256, separated by dots (e.g., 123.4.5-678). A distinct IP 
address is assigned to each different computer that is con- 
nected to the Internet. Because numeric IP addresses are 
difficult for people to remember, the custom has arisen to 
utilize domain names for computers on the Internet rather 
than the IP numbers themselves. 

Typical e-mail messages are addressed to a recipient in the 
form of "username@domain_name. domain," where user- 
name is a form of name for a message recipient, domain^ 
name is a lower level domain name assigned to an organi- 
zation or an ISP, and domain is a top level domain name. 
Present top level domain names are limited and can be the 
U.S. government (.gov), the U.S. military (.mil), a network 
(.net), a commercial enterprise (.com), an educational insti- 
tution (.edu), or a country (e ,g ., jp for Japan or uk for the 
United Kingdom), For example, Joe Smith might subscribe 
to Internet service provided by a commercial enterprise or 
ISP called "Braincoil, Inc," and be given an e-mail address 
in the form of joe___smith@braincoilcom. 

A computer called a domain name server ("DNS") trans- 
lates between the domainjame.domain portion of an 
e-mail address and the numeric Internet protocol ("IP") 
address. When a message with an e-mail address is received 
at an ISP from one of its subscribers, the ISP employs a DNS 
to look up the numeric IP address associated with the e-mail 
address. Using the IP address of the message, the ISP 
transmits the message to an electronic device called a router, 
which selects one of possibly several different data commu- 
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nication paths connected to another computer and sends the 
message to the other computer. The message is passed from 
computer to computer, via their respective connected 
routers, until the message arrives at a computer associated 

5 with the ultimate intended recipient. Typically, the final 
computer to receive the message is a computer operated by 
the ISP to which the recipient subscribes. The message is 
then stored in a mailbox associated with the subscriber, and 
the subscriber is often notified via e-mail software that he or 

10 she has mail in the mailbox. 

A particular problem encountered in today's usage of the 
Internet is the movement of subscribers from one organiza- 
tion to another, such as from one ISP to another. There are 
many reasons for subscribers to change ISPs, including a 

15 geographical move from one part of the country to another, 
a change to obtain a more favorable pricing plan, and a 
dissatisfaction with the service provided by an ISR Chang- 
ing ISPs typically means that a subscriber's e-mail address 
will change, unbeknownst to people who wish to send that 

20 subscriber a message. For example, Braincoil subscriber Joe 
Smith might have originally had an address such as joe_ 
smith@braincoilcom. If Joe Smith moves his Internet ser- 
vice to a new and different ISP called "Headspiral", he might 
acquire a new e-mail address such as joe.smith@headspiral, 

25 com. Although it might be desirable to have a person keep 
his e-mail address on a permanent basis, the present scheme 
of addressing typically mandates that changing ISPs results 
in changing e-mail addresses. 
People who wish to send Joe Smith a message may not 

30 know that Joe Smith has changed ISPs and thus has a new 
e-mail address. After a person changes ISPs, his old e-mail 
address at his old, former ISP becomes invalid. Messages 
sent to an invalid e-mail address typically "bounce" back 
j&om the intended recipient's old ISP to the sender's ISP. 

35 Stated in other words, the old ISP cannot deliver the message 
to the recipient, who is no longer a subscriber. In this case, 
the old ISP typically sends a predetermined message back to 
the sender's ISP that the message is undeliverable. This 
predetermined "bounce" message often includes a text string 

40 containing the text "message undeliverable". The predeter- 
mined bounce message is dehvered to the sender to inform 
him or her that there is a problem with delivery of the 
message. 

After a sender receives a bounce message, the sender may 
45 conduct a search on the Internet or may attempt to contact 
the intended recipient by other means (e.g., telephone) in 
order to obtain the intended recipient's new e-mail address. 
If the sender succeeds in finding the new e-mail address, he 
can send the message again, though a delay in delivery of the 
50 message has resulted. On the other hand, if the sender cannot 
find the new e-mail address, then the message cannot be 
delivered at all 

It would be helpful if ISPs maintained a list correlating 
old e-mail addresses and new e-mail addresses and updated 
55 the list when subscribers terminated their subscriptions. That 
way, they could provide a forwarding service., However, 
ISPs typically have no financial incentive to forward mes- 
sages intended for former subscribers. Message forwarding 
requires use of computer and bandwidth resources for which 
ISPs will typically receive no payment. Thus, a need exists 
for a system and methods that facilitate delivery of e-mail 
when a person obtains a new e-mail address and his or her 
old e-mail address becomes invalid. 

^5 SUMMARY OF THE INVE.NTION 

Briefly described, the present invention comprises a sys- 
tem and methods for managing e-mail address changes. The 
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preferred system comprises a computer for managing a addresses for situations where subscribers change ISPs and 

database of stored records correlating a first e-mail address obtain a new e-mail address. 

of an intended recipient to a second e-mail address of the it is another object of the present invention to provide a 
intended recipient. A program module in the computer system for e-mail address management that facilitates deliv- 
system is responsive to an Internet query from a sender of an 5 ery of e-mail for new subscribers of an ISP by providing an 
e-mail message based on the first e-mail address of the address matching service between old e-mai addresses of 
intended recipient The program module accesses the data- subscribers and their new e-mail addresses, 
base to determine whether a second e-mail address of the -p^^^^ ^^^^^ objects, features, and advantages of the 
intended recipient is stored in association with the first ^^^^^^^ invention will become more clear upon reference to 
e-man address„ Another program module in the computer lo accompanying drawings and the following detailed 
system, which is responsive to a determination that a second description, 
e-mail address of the intended recipient is stored in asso- 
ciation with the first e-maii address, retrieves the second BRIEF DESCRIPTION OF THE DRAWINGS 

e-mail address as a response lo the query. Furthermore, a 

program module is provided for communicating the query i5 ^I^. 1 is a block diagram illustratmg the present known 

response to the sender system for communicating e-mail messages from a sender to 

. . , r • 'u u ' i-^ ^ an intended recipient via the Internet. 

A principal use of the mvention will be in situations ^ 

wherein the first e-mail address is an invalid old address Fl^- 2 is a flow chart iUustrating the known process by 

associated with a former Internet service provider (ISP) of which present day e-mail systems handle e-mail delivery 
the intended recipient, and the second e-mail address is a 20 and error messages in the event of failed delivery, 

new e-mail address associated with a new ISP of the FIG. 3 is a block diagram illustrating an Internet-based 

intended recipient. system for communicating e-mail messages from a sender to 

Preferably, the computer systems utilized in implement- an intended recipient constructed in accordance with the 

ing the present invention are Internet accessible, and the present invention. 

query and query response are communicated via Internet FIG. 4 is a flow chart illustrating the process carried out 

messaging protocols, by the preferred system of FIG. 3. 

According to another aspect of the invention, a computer FIG. 5 illustrates the process by which a person registers 

system automatically forwards the e-mail message to the an address change and authentication steps for use in the 

second e-mail address in response to receipt of the query preferred system of FIG. 3. 

response„ In one embodiment, it is a computer system ' ^ ^ nTo-rirvM tud 

associated with the sender of the e-raail message that DETAILED DESCRIPTION OF THE 

automatically forwards the e-mail message to the second PREFERRED EMBODIMENT 

e-mail address in response to receipt of the query response,, Referring now to the drawings, in which like numerals 

More specifically, the query response is provided to an ISP indicate like elements and/or components throughout the 

associated with the sender, and the sender's ISP autofor- several figures, FIG. 1 illustrates the present general Internet 

wards the e-mail message to the second e-mail address. environmentlOOin which electronic mail operates. A sender 

Alternatively, the query response may be provided directly jg 3 person who wants to send an e-mail message to an 

to the sender, and the sender's computer is operative to intended recipient 150. The sender 110 subscribes to Internet 

readdress and resend the e-mail message. service via a sender Internet service provider (ISP) 120. The 

According to yet another aspect of the invention, there is sender 110 believes the intended recipient 150 is another 

provided a program module for creating a new record in the computer user who subscribes to a recipient ISP 140. The 

database in response to receipt of an address change request sender ISP 120 and the recipient ISP 140 are connected for 

from a consumer For security purposes, such as ensuring data communications through a data network such as the 

that address changes requests are authentic, the program Internet 130, which is represented as a "cloud" to indicate its 

module for creating a new record in the database is operative amorphous, widely distributed nature, 

for requiring predetermined authenticating information pjQ^ 2 illustrates the known prior art process 200 that is 

before creating a record in the database. This authenticating followed when an e-mafl message is sent from a first user at 

information is preferably obtained from an Internet acces- one ISP (the sender 110) to an intended recipient. Starting at 

sible authenticating authority. Various types of authenticate si^p 210, the sender 110 composes an e-mafl message, He 

ing information may be required, such as a consumer then addresses that e-mail with an address he believes to be 

authenticator identifying the person that requested the ii^g correct one for the intended recipient. As described 

address change or a merchant authenticator identifying the above, an e-mail address is formatted to comprise two pieces 

ISP from which the address change request originated. of information: 1) recipient's username (which corresponds 

In embodiments of the invention that include the security 55 to the mailbox the sender believes the intended recipient has 

features, the database stores other predetermined informa- at an ISP), and 2) the domain name and domain associated 

tion in association with the first e-mail address and the with the recipient ISP 140. After composing and addressing 

second e-mail address, such other information selected from the message, the sender 110 then sends the message from his 

the group comprising a consumer consent, consumer computer utilizing known e-mail computer software, 
authentication, and merchant authentication. 50 After the sender 110 sends the message, step 220 is 

In addition to implementing the present invention with performed. In step 220, the message arrives at the sender ISP 

systems operative as described above, the present invention 120, Next, in step 230, the sender ISP 120 routes the 

may also be embodied as computer-implemented methods message to the recipient ISP 140 using the address that was 

for carrying out the various e-mail address management and provided with the message„ The sender ISP 120 typically 
address change operations of the invention. 65 does this by employing a domain name server (DNS) to 

Accordingly, it is an object of the present invention to translate the address provided with the message into a 

provide a system and methods for managing e-mail numeric IP address. Using the IP address, the sender ISP 120 
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sends the message over the Internet through the proper mail Clearly, the described problem inconveniences both send- 

gateway (not shown). After traveling over the Internet 130, ers and intended recipients It also poses a burden to any ISP 

the message arrives at the recipient ISP 140. attemptiiig to win over customers from other ISPs. Many 

Next at step 240, the recipient ISP 140 determines people have a natural resistance to change; once an e-mail 
whether there is an address match. That is, the recipient ISP 5 address has been widely disseminated, there is a disincentive 

140 determines if the mailbox specified in the usemame to obtain a new address because of the inconvenience of 

portion of the e-mail address exists at that ISP. This step is notifying a large number of people of the new address, 

effected by reference to a stored list of valid addresses Therefore, there is a need in the art to reduce the inconve- 

associated with the recipient ISR niences caused by users changing ISPs and/or addresses. 

If there is an address match, the recipient ISP 140 deposits The present invention makes the process of sending 

the message in the mail box of the recipient 150 at step 250.. e-mail function more smoothly through a system and meth^ 

Once a message has been deposited in the recipient's ods for managing e-mail addresses, especially e-mail 

mailbox, the recipient can access that message in step 260 addresses that have changed. In this manner, the present 

through a computer connected to the recipient ISP 140. invention allows reduction of the inconveniences caused by 

If, at step 240, there is no address match for the e-mail ^ ^^er changing his or her ISP or address, 
message at the recipient ISP 140, then step 270 is performed. Referring next to FIG. 3, a general Internet architecture 
At step 270, the recipient ISP 140 returns the message to the 300 that includes an E-mail Address Management System 
sender in the known manner along with an error message ("EAMS") 330 constructed in accordance with the preferred 
(also called a "bounce" message) because the intended embodiment of the present invention is shown and will be 
recipient does not have the mailbox specified in the address ^° described. The preferred EAMS 330 is a compuler- 
at the recipient ISP. The recipient ISP 140 returns the implemented database system comprising a gateway 332, a 
message by sending it back over the Internet 130 lo the computer server 335, and a memory or database 338 con- 
sender ISP 120„ In turn, the sender ISP transmits the error structed as a database look-up table that correlates an old 
message to the mailbox of the sender 110., As previously e-mail address to a new e-mail address for each participant, 
described, a typical error message contains the text string For example, the recipient 150 at one time was a user of Old 
"message undelivcrable." Although most present day e-mail ISP 140 and had an old mailbox at Old ISP with an old 
systems typically include this "message undeliverable" text address. At a later time, the recipient 1,50 changed ISPs to 
string, those skilled in the art will appreciate that other New ISP 320 and obtained a new mailbox at New ISP with 
mechanisms or text strings can exist or be created to indicate a new address. 

the fact that an e-mail message cannot be delivered to a In the preferred system, the recipient 150 registers his or 

particular mailbox, and that such other mechanisms or text her address change with the EAMS 330 in order to have 

strings may serve as an indication that a "message" is information about the address change in the database 338. 

"undeliverable" within the scope of the present invention. The registration process is discussed in more detail later. As 

Now that the known e-mail process 200 has been described above, the preferred EAMS 330 contains an old 

described, one can better appreciate what events may lead a address and a new address for each address change regis- 

message to be returned to a sender because the message tered with the EAMS 330 and stored in the database 338. 

could not be delivered to the intended recipient. In Preferably, this address change information is stored in the 

particular, one common situation merits special mention. form of a data record 340 having a plurality of data fields. 

Suppose the intended recipient was at one time connected 40 including an old e-mail address field 342 and a new e-mail 

to the Internet through an ISP called Old ISP While the address field 344. The fields of a plurality of these records 

recipient had a mailbox at Old ISP, he distributed his e-mail may be indexed for searching or otherwise stored so that 

address to many others, including sender At a later time, tbey can be retrieved in accordance with known database 

suppose that the intended recipient changed ISPs from Old techniques. 

ISP to a different ISP called New ISP In doing so, the 45 The EAMS 330 is connected to the Internet 130 and thus 

intended recipient's mailbox at Old ISP was removed, and is accessible by any ISP that is connected to the Internet and 

he got a new mailbox at New ISR Along with the mailbox can send and receive e-mail messages. Other types of 

change, of course, came an address change from an old communications between the EAMS 330 and ISPs are 

e-mail address to a new address. However, the intended possible and contemplated in the present invention, such as 
recipient's old address was so widely distributed that he may 50 file transfer protocol (ftp) messaging, hypertext transfer 

have been unable to inform every friend and acquaintance of protocol (http) messaging, and customized messaging using 

his new address. Further suppose that the sender was one of the TCP/IP protocol. However, the known Internet e-mail 

those people that the intended recipient failed to inform of messaging protocol is preferred for its simplicity and wide 

the new address.. acceptability. 

Now, suppose that the sender wants to send a message to 55 Also shown in FIG. 3 is an authenticating authority 360 
the intended recipient. Not having been informed otherwise, connected to the Internet 130. The authenticating authority 
the sender assumes that the intended recipient can still 360 is one of several known types of systems that provide 
receive e-mail at the old address. When the sender sends a computer-based authentications, such as a certificate author- 
message to the intended recipient at the old address, it is ity. One example of a known authenticating authority is the 
returned to him with an error message because Old ISP is 60 Cybertrust, operated by GTE. An authenticating authority 
unable to find an address match. 360 may be involved in the present invention in embodi- 

If, at that point, the sender still wants the intended ments wherein the EAMS 330 , for security and fraud 

recipient to receive the message, he will first have to conduct prevention purposes, requires certain authenticating infor- 

a search to find the intended recipient's new address. If the mation from subscribers before accepting data that corre- 
sender succeeds in finding the intended recipient's new 65 lates a new e-mail address to an old e-mail address, 

e-mail address, he must then once again send the message, According lo another aspect of the invention, described in 

this time to the new address. more detail below, the database 338 also stores predeter- 
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mined information associated with an old e-mail address and the bounce message in the first place„ The sender 110 may 

new e-mail address. By way of example but not limitation, also want to query the EAMS 330 about an address change 

this information may include consumer consent information, if the sender suspects, even before sending an e-mail, that 

consiuner aulhenlicator information, and merchant authen- the intended recipient 150 has changed addresses, 

ticator information and may be stored in separate but asso- 5 another embodiment of the present invention, a 

ciated fields 350, 352, and 354, respectively, of the record ^^^^^^ provided with forwarding software that is 

340. Such additional fields are preferably provided for stored on the sender's computer. The forwarding software is 

purposes of security trou^^^^^^^ and dispute handhng. ...^ipt of a bounce message indicating that a 

Generally, the EAMS 330 is operative to receive from any previously sent by the sender could not be deliv^ 

source queries in the form of predetermmed messages jo ered(i.e,, the software is automatically responsive to the text 

containing an e-mail address In response to receiving a .^^^ undeUverable" contained in an e-mail 

query, the EAMS 330 can look up the e-mail address m the y Upon receiving such a bounce message, the 

database 338 in order to determme if the e-mail address is ^^..^i ^^^^^^^ , query to the EAMS 330 

associated with a new e-mail address. In one emboditnent of determine if the EAMS 330 has a record associating a new 

the present invention, the QueiT to the EAMS 330 may ,5 ^^^^^ ^^^^^^ ^^^^ ^^^^^^^ ^^^^^^ ^^^^ 

include a message that the EAMS 330 automatically for- ^^^j^ dehvered. The EAMS 330 then notifies the 

wards ("autoforu'ards") to the new address if a new address foj^^rding software preferably via e-mail, of the results of 

is found „ ^j^g query, and the EAMS 330 includes the new address if 

Alternatively, the EAMS 330 is not operative to auto- ^^^^^ ^^^^ notification that there exists a new 

matically forward a message even if a new address is found 20 address, the forwarding software automatically forwards the 

after searching the database 338- Instead, if the database 338 message that previously could not be deHvered to the new 

correlates a new address with the address sent in the query, address 

the EAMS 330 informs the entity which sent the query about ^ ^^^^^^^^ ^ ^j^^ ^^^^^ ^^^^^^^^ 

the new address. On the other hand, the database 338 does ^^^^^^^ ^ ^^^^^^^ ^ ^ 

not have a new e-maxl address associated with the address ,5 ^^^^^^ ^.^^.j ^ , ,.^^1 .^dress over 

sent m the query, the EAMS 330 mforms the entity which » . * aa - - .u^Z. ;t ^.,-t 

, c i: . \r • ^ u^A' i the Internet After receiving the e-mail message, the mail 

sent the query of this tact Various embodiments of the . ^ i-,a a Tu t 1 Z.l 

. .. -t-i • L- u j-xr . forwarder 114 then sends the message back out onto the 

present mvenlion are possible m which diflerent entities _ ^ ^ .i_ t . * aa aa * 

r i-.A»#o lift A r 1 , u^^- Internet to another Internet address. The address to which 

query the EAMS 330. A few of these exemplary embodi- ^ ^^^^^^^^ determined by 

ments are now d^cussed m more detail. . , ^« software used to operate the mail forwarder 114, or alter^ 

'^fo embodmient of the present mvention the forwarder may look to the contents of the 

sender ISP 120 is configured to autoforward e-mail contam- instructions on where to send the e-mail, 

ing an old address to a new address. If a message is sent to . 1 ten ion a 

an intended recipient at the old address, the message is forwarder 114, the sender ISP 120, and the 

returned to the sender ISP 120 with an error message, since 35 ^^^^er 110 are all sending entities 112 that are capable of 

there is no address match at Old ISP 140, At that point, the sendmg and receiving e-mail messages. One sloUed m the 

sender ISP 120 queries the EAMS 330 over the Internet 130 artshouldrecognizelhat various embodiments of the present 

to find out if there is an address change registered with the invention are possible m which any one of the sending 

EAMS for the old address. Then, the EAMS 330 searches its ^"titles attempts to send an e-mail message using a first 

database to see if it contains a record relating the old address 40 f ^'^f ' /^^ri! ^'fu^ « undehverable error, queries 

to a new address^ If a new address is found for the old ^^^J^^^ 330 based on the first address, revives a second 

address, then the EAMS 330 sends the new address back to address over the Internet from the EAMS 330 m response to 

the sender ISP 120 With the new address, the sender ISP 120 ^^e Q^jery, and then resends the e-mail message usmg the 

automatically forwards the message to the intended recipient second address. 

150 at the new ISP 320 and notifies the sender 110 via e-mail 45 F^^^ 4 is a flowchart illustrating a computer-implemented 

of the intended recipient's new address^ If the EAMS 330 process or method 400 for sending an e-mail in accordance 

does not find a record relating an old address to a new with the preferred embodiment of the present invention. The 

address, then the EAMS 330 preferably notifies the sender described process assumes that a sender ISP is configured to 

ISP 120 of this fact. In this case, the sender ISP 120 then access an EAMS 330 over the Internet in the event that a 

notifies the sender 110 via e-mail that the message could not 50 message is returned to it which is undehverable, 

be delivered to old address and that there was no forwarding The method 400 is preferably implemented as one or 

address registered with the EAMS 330, more computer application programs, operative to run on a 

In another embodiment of the invention, a sender 110 who computer apparatus comprising a central processing unit, 

□receives a bounce message can himselfor herself query the main memory, permanent read/write memory (hard disk, 

EAMS 330 over the Internet 130 to determine if the intended 55 floppy disk, etc.), display, keyboard, and mouse. Such 

recipient 150 has registered an address change with the elements of a computer apparatus are known to those skilled 

EAMS 330, In such an embodiment, the query may be in the art and will not be described further herein. It will 

conducted via e-mail , Alternatively, the EAMS 330 may further be appreciated that the steps of FIG. 4 are carried out 

have a web site interface (i.e., an http interface) that allows in several different computer devices connected, for 

a sender 110 to input an e-mail address and determine if that 60 example, via the Internet. These computer devices comprise 

e-mail address is correlated with a new e-mail address. This a computer system associated with the message sender, a 

aspect of the invention is useful where the ISP of the sender computer system associated with the message sender's ISP, 

110 is not configured to automatically query the EAMS 330 a computer system associated with the intended recipient's 

to obtain a new e-mail address in response to receipt of a old ISP, a computer system associated with the intended 

bounce message. In this situation, the sender 110 who finds 65 recipient's new ISP, and a computer system associated with 

a new address after making a query of the EAMS 330 can an EAMS 330 constructed and operative as described 

then use the new address to resend the message that caused herein. The discussion which follows will enable one skilled 
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to Ihe art to understand which portions or parts of the process 
400 are applicable to and carried out in which computer 
system. 

Starting in FIG. 4 at step 405, a sender composes a 
message at his or her computer and addresses it to the 
address believed to be correct for an intended recipient. The 
sender then sends the message from his computer to a 
computer system that provides Internet access, which is 
typically the ISP at which the sender maintains an Internet 
service subscription. An example of the ISP to which the 
sender may send his message is the sender ISP 120 of FIG., 
3„ It will, however, be appreciated that a message need not 
be sent to a specific ISP at which the sender maintains a 
subscription; rather, in accordance with the invention, the 
message may be sent to any computer system that provides 
Internet access, which for purposes of this description serves 
as the "sender ISP". 

At step 410, the message arrives at the sender ISR At step 
415, the sender ISP chooses a particular mail gateway in 
accordance with the IP address of the message and routes the 
message to the ISP indicated in the message address as the 
recipient ISP. The message is then sent over the Internet and 
arrives at the recipient ISP, which is the old ISP 140 in FIG. 
3. 

At step 420, the recipient ISP determines whether there is 
an address match, i.e , whether the mailbox specified in the 
address of the received message presently exists at recipient 
ISP. This is carried out in the known manner by referencuj to 
an address table stored at the recipient ISP that correlates 
subscribers of that ISP and their associated e-mail addresses. 

If the recipient ISP finds an address match at step 420, 
then step 425 is performed„ At step 425, the recipient ISP 
deposits the message in the mailbox specified in the address. 
At step 430, the intended recipient accesses the message 
from his maObox using a computer connected to the recipi- 
ent ISE After the intended recipient accesses the message in 
his mailbox, the process ends at step 435, 

It will be appreciated that the situation of the foregoing 
steps is identical to that of FIG. 1 and the accompanying text 
where the intended recipient has a mailbox at the address to 
which the sender 110 sends the message. If this is the case, 
it will of course be appreciated that the EAMS 330 does not 
enter into play. On the other hand, if, at step 420, there is no 
match between the e-mail address of the message received 
at the recipient ISP and the list of valid addresses at the 
recipient ISP, the "no" branch is followed to step 440 and the 
method of the present invention comes into play. 

At step 440, the recipient ISP returns the message to the 
sender ISP over the Internet with an error or bounce 
message, as previously described. Control then passes to 
step 445. 

At step 445, the sender ISP receives the error message and 
sends an address query to the EAMS 330 over the Internet 
to determine if there is an address change registered with the 
EAMS 330 for the address indicated in the returned mes- 
sage. The address query comprises the address for which a 
new address is sought. 

After the EAMS 330 receives the address query, step 450 
is performed. In step 450, the EAMS 330 searches its 
database, i.e. database 338 FIG. 3, to see if it contains a 
record relating a new address to the address contained in the 
address query. If a new address is found for the address of 
the address query, then there is an EAMS match. 

If there is no EAMS match, control passes to step 455., 
There are several reasons for no EAMS match. For example, 
the reason could be because the intended recipient never had 
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the mailbox specified in the address at the recipient ISP 
specified in the address. Or, there might be no EAMS match 
because the intended recipient changed addresses but failed 
to register the address change with the EAMS 330. In step 

5 455, the EAMS 330 notifies the sender ISP that there was no 
EAMS match. 

At step 460, the sender ISP notifies the sender, typically 
via e-mail, that the message could not be delivered to the 
address provided for the message and that there was no 

10 address change registered with the EAMS 330 for that 
address. After step 460, the process ends at step 435. 

It will of course be appreciated that there will be an 
EAMS match found at step 450 in the event that the intended 
recipient has registered his or her address change with the 
EAMS 330 A match will also be found at step 450 in the 
event that the EAMS 330 for some other reason contains a 
record matching the old e-mail address to a new e-mail 
address. For example, the present invention contemplates 
the situation where ISPs transmit address changes to the 
EAMS 330, The present invention also contemplates the 
situation where some other third party provides the EAMS 
330 with a list correlating particular e-mail addresses to 
other e-mail addresses. 

Returning to step 450, if there is an EAMS match for the 
address provided in the address query from the sender ISP, 
then control passes to step 462, in which the EAMS 330 
sends the new address over the Internet back to the sender 
ISP Once the sender ISP receives the new address, the 
sender ISP notifies the sender via e-mail of the intended 
recipient's new address in step 465. 

In step 470, the sender ISP forwards the message to the 
intended recipient's new ISP using the new address After 
the new ISP receives the message, control passes to step 420, 

25 with the new ISP now serving as the recipient ISR The 
message is then delivered to the intended recipient in 
accordance with the steps subsequent to 420. 

FIG. 5 illustrates a registration process 500 in which 
persons with e-mail addresses or mailboxes ("consumers") 

4Q provide information to the disclosed EAMS 330 for the 
purpose of maintaining the cross reference table or database 
338 of FIG. 3. Typically, the present invention contemplates 
creation of a new record in the database in response to 
receipt of an address change request from a consumer. It will 

45 be appreciated that there are several ways in which a 
consumer may provide the requisite information of an e-mail 
address change to the EAMS 330, 

One way to register an address change is for a consumer 
510 to register an address change with the EAMS 330 

50 directly in the form of an address change request. In this 
case, the consumer 510 provides the EAMS 330 with an 
address change request comprising predetermined informa- 
tion indicating the identity of the consumer and the e-mail 
address change. For security purposes and for ensuring that 

55 an address change is valid, the EAMS 330 may require 
certain additional information from the consumer before 
creating a record correlating the given new e-mail address to 
an old address. This additional information may include the 
consumer's social security number, mother's maiden name, 

60 employer's ID number, and similar information. 

In such an embodiment, however, it wiU be appreciated 
that security is not as great as may be desired, and greater 
assurance of the validity of an address change may be 
preferred. Therefore, preferred embodiments of the inven- 

65 tion will employ devices or methods for increasing assur- 
ance of a valid change., ITiose skilled in the art will under- 
stand and appreciate that there are presently several known 
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methods for authenticating a person's identity and authority and is reauthorized and/or recognized by the EAMS 330 as 

in the Internet environment. For example, an authenticating an entity from whom the EAMS 330 accepts address 

authority, such as the authenticating authority 360 in FIG, 3, changes. In accordance with an aspect of the invention, the 

is preferably employed to provide such greater assurance of EAMS 330 can refuse to accept address change requests 

a valid address change, 5 from ISPs that are known to be "outlaw" or have developed 

In accordance with the preferred embodiments of the a history of customer problems or unauthorized address 

invention, the EAMS 330 requires predetermined authenti- changes. As in the case of consumer authentication, ISPs can 

cation information prior to effecting an address change. This obtain a merchant authenticator by registering with any one 

is to minirize the possibility that an unauthorized person can of a number known authentication authorities approved 

successfully divert e-mail from a known e-mail address to and/or recognized by the entity running the EAMS 330. All 

another address for unlawful purposes such as e-mail inter- registrations may, but need not, be transacted electronically 

ception or as a mahcious prank. Preferably, therefore, any over the Internet 130. 

registration with the EAMS 330 will include (1) an address Once the EAMS 330 receives the required predetermined 
change request and (2) a consumer authenticator The information, e.g„ change request, consumer consent, con- 
address change request typically includes the consumer ^^^^^^ authenticator, and merchant authenticator, it first 
510*s old e-mail address and new e-mail address, as well as validates both the consumer authenticator and the merchant 
other optional information, authenticator This is carried out in the known manner by 

The consumer authenticator simply ensures that the con- reference to the applicable authorities that issued the aulhen- 

sumer 510 is who he says he is. The consumer 510 can licators. After validation, the EAMS 330 creates a record in 

obtain a consumer authenticator by registering with any one its database 338 containing the old e-mail address in asso- 

of a number of known authentication authorities, such as the " ciation with the new e-mail address so that it can provide the 

authentication authority 360 in FIG. 3, that are approved by new address in response to an address query on the old 

the entity running the EAMS 330, The address change address. In addition, according to another aspect of the 

registration and the registration with the authentication invention, information corresponding to the change request, 

authority may, but need not, be transacted electronically consumer consent, consumer authenticator, and merchant 

over the Internet 130. authenticator are stored in the database 338 so that such 

Once the EAMS 330 receives the address change request information can be retrieved and referenced in the event of 

and consumer authenticator, it first validates the consumer a later difficulty or dispute. 

authenticator. This is typically effected by contacting the Now that the address change registration process has been 

authenticating authority in the known manner. After explained, another embodiment of the present invention is 

validation, the EAMS 330 creates a record in its database discussed. Those skilled in the art will recognize that when 

338 so that it can provide the new address in response to an an old ISP 140 receives a message that it cannot deliver 

address query on the old address. because there is no address match, it is possible for the old 

Alternatively, and still referring to FIG. 5, there is a ISP to send an address query on the address to the EAMS 

second way to register an address change. In this second 35 330 instead of immediately sending the message back to the 

option, the consumer 510 who has obtained a new e-mail sender ISP 120 with an error message and letting the sender 

address with an ISP 520 first provides the ISP 520 with ISP conduct the address query. Once the old ISP 140 

predetermined information comprising (1) a consumer con- receives the results of the address query, the old ISP can act 

sent and (2) a consumer authenticator, The consumer con- on the results just as the sender ISP 120 would have acted 

sent ensures that the consumer 510 wants his or her address had the sender ISP conducted the address query. It will 

change registered with the EAMS 330 . The consumer therefore be appreciated that the present invention is not 

authenticator is the same as that used in the first registration limited to a situation in which the sender's ISP queries the 

option and can be obtained as already explained. EAMS 330 with the old address. Rather, the invention is 

Once the ISP 520 has both the consumer consent and the operative in any situation where an Internet entity becomes 

consumer authenticator, the ISP preferably submits certain 45 aware of the inability to deliver an e-mail message due to 

predetermined information, typically via e-mail or other such circumstances as an address being invalid, outdated, or 

Internet communication, to the EAMS 330 , This predeter- changed. 

mined information preferably comprises (1) a change Other alternative embodiments of the present invention 

request, (2) the consumer consent, (3) the consumer will become apparent to those skilled in the art without 

authenticator, and (4) a merchant authenticator Although all 50 departing from its spirit and scope. The preferred embodi- 

of this information is not required in all embodiments, ment of the present invention has been disclosed by way of 

certain combinations of this information are preferred for example and it will be understood that other modifications 

use in the present invention to provide for adequate assur- may occur to those skilled in the art without departing from 

ances of security and privacy for the ISP's customers. the scope and the spirit of the appended claims. 

Typically, the change request will include as minimum 55 What is claimed is: 
required information the old e-mail address and the new 1, A method for effecting delivery of an e-mail message 
e-mail address of the consumer 510. Furthermore, it is also from a sender to an intended recipient, the sender having an 
contemplated that the ISP 520 may retain the consumer Internet service provider (ISP) operative to transmit e-mail 
authenticator and provide the merchant authenticator in messages, the intended recipient associated with an unde- 
embodiments where the EAMS 330 only requires provision 60 liverable first e-mail address associated with a first Internet 
of the merchant authenticator. This configuration may be service provider (ISP) and currently associated with a sec- 
more attractive in certain situations, such as when the ISP ond e-mail address associated with a second Internet service 
520 is configured to store cx)nsumer consents and authenti- provider (ISP), comprising the computer implemented steps 
cators and the EAMS 330 is configured to store merchant of: 

authenticators, 65 providing a database of stored records correlating the first 

The merchant authenticator comprises predetermined e-mail address of the intended recipient to the second 

information that ensures that the ISP 520 is a legitimate ISP e-mail address of the intended recipient; 
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in response to receipt at the sender's ISP of a "message 
undeliverable" message from the first ISP in response 
to the e-mail message being undeliverable to the first 
e-mail address, communicating a query from the send- 
er's ISP to ±e database, the query including the unde- 
liverable first e-mail address; 

receiving at the database the query from the sender's ISP; 

in response to the query, accessing the database to deter- 
mine whether the second e-mail address of the intended 
recipient is correlated with the first e-mail address; 

in response to a determination that the second e-mail 
address of the intended recipient is correlated with the 
first e-mail address, retrieving the second e-mail 
address as a response to the query and generating a 
query response including the second e-mail address; 

communicating the query response to the sender's ISP; 

at the sender's ISP, utilizing the second e-mail address 
received in the query response as the address for the 
e-mail message; and 

automatically transmitting the e-mail message from the 
sender's ISP to the second ISP associated with the 
second e-mail address without the sender's involve- 
ment. 

2. The method of claim 1, wherein the first e-mail address 
is an invalid old address associated with a former Internet 
service provider (ISP) of the intended recipient and the 
second e-mail address is a new e-mail address associated 
with a new ISP of the intended recipient. 

3. The method of claim 1, wherein the database is stored 
in an Internet accessible electronic mail address manage- 
ment system (EAMS), and the query and query response are 
communicated via Internet messaging protocols, 

4. The method of claim 1, wherein a computer system 
associated with the database automatically forwards the 
e-mail message to the second e-mail address in response to 
the query response, 

5. The method of claim 1, further comprising steps for 
creating a new record in the database in response to receipt 
of an address change request from a consumer having an 
e-mail box. 

6. The method of claim 5, further comprising the step of 
requiring predetermined authenticating information before 
creating the new record in the database. 

7.. The method of claim 6, wherein the authenticating 
information is obtained from an Internet accessible authen- 
ticating authority„ 

8. The method of claim 6, wherein the authenticating 
information comprises a consumer authenticalor, 

9. The method of claim 6, wherein the authenticating 
information comprises a merchant authenticaton 

10. The method of claim 1, wherein the database stores 
other predetermined information in association with the first 
e-mail address and the second e-mail address, such other 
information selected from the group comprising a consumer 
consent, consumer authentication, and merchant authendca- 
lion, 

11. A system for managing e-mail address changes, com- 
prising: 

a computer system; 

a database of stored records in the computer system 
correlating a first e-mail address of an intended recipi- 
ent to a second e-mail address of the intended recipient; 

a program module in the computer system responsive to 
a query from a sender's Internet service provider (ISP) 
associated with a sender of an e-mail message based on 
the first e-mail address of the intended recipient for 
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accessing the database to determine whether the second 
e-mail address of the intended recipient is stored in 
association with the first e-mail address; 
a program module in the computer system, responsive to 
5 a determination that the second e-mail address of the 
intended recipient is stored in association with the first 
e-mail address, for retrieving the second e-mail address 
as a response to the query; and 
a program module in the computer system for communi- 
ng eating the query response to a process for utilization in 
automatically re-transmitting the e-maO message to the 
second e-mail address without the sender's involve- 
ment. 

12. The system of claim 11, wherein the first e-mail 
address is an invalid old address associated with a former 

■^^ Internet service provider (ISP) of the intended recipient and 
the second e-mail address is a new e-mail address associated 
with a new ISP of the intended recipient. 

13. The system of claim 12, wherein the Internet query is 
generated by an Internet service provider (ISP) associated 
with the sender in response to receipt of a "message unde- 
liverable" message received from the former ISP when the 
e-mail message was sent to the first e-mail address, 

14. The system of claim 11, wherein the computer system 
is Interoet accessible, and the query and query response are 
communicated via Internet messaging protocols. 

15. The system of claim 11, further comprising a program 
module for creating a new record in the database in response 
to receipt of an address change request from a consumer. 

16. The system of claim 15, wherein the program module 
for creating a new record in the database is operative for 
requiring predetermined authenticating information before 
creating a record in the database. 

17. The system of claim 16, wherein the authenticating 
information is obtained from an Internet accessible authen- 
ticating authority. 

18. The system of claim 16, wherein the authenticating 
information comprises a consumer authenticator 

19. The system of claim 16, wherein the authenticating 
information comprises a merchant authenticator. 

20. The system of claim 11, wherein the records of the 
database store other predetermined information in associa- 
tion with the first e-mail address and the second e-mail 
address, such other information selected from the group 
comprising a consumer consent, consumer authentication, 

'^^ and merchant authentication. 

21. A method for effecting delivery of an e-mail message 
from a sender to an intended recipient, the intended recipient 
being associated with a first e-mail address associated with 
a first Internet service provider (ISP) and a second e-mail 
address associated with a second ISP, comprising the 
computer-implemented steps of: 

providing an electronic mail address management system 
(EAMS) database of stored records correlating the first 
e-mail address of the intended recipient to the second 
e-mail address of the intended recipient; 

at the sender, creating the e-mail message using the 
intended recipient's first e-mail address; 

communicating the e-mail message from the sender to the 
gQ sender's Internet service provider (ISP) via the Internet; 

at the sender's ISP, attempting to deliver the e-mail 
message to the intended recipient at the first e-mail 
address; 

receiving the e-mail message at the first ISP; 
65 determining at the first ISP that the first e-mail address is 
not a valid address and generating a "message unde- 
liverable" message in response thereto; 
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communicating the "message un deliverable" message 
jfrom the first ISP to the sender's ISP; 

in response to receiving the "message undeliverable" 
message at the sender's ISP, generating a query based 
on the first e-mail address of the intended recipient; 

communicating the query from the sender's ISP to the 
EAMS database; 

in response to the receipt of the query, accessing the 
EAMS database to determine whether the second 
e-mail address of the intended recipient is stored in 
association with the first e-mail address; 

in response to a determination that the second e-mail 
address of the intended recipient is stored in association 
with the first e-mail address, retrieving the second 
e-mail address from the EAMS database as a response 
to the query; 

communicating the query response to a computer system 

not operated by the sender; 
modifying the e-mail message to utilize the second e-mail 

address as the address for the e-mail message; and 
automatically transmitting the modified e-mail message to 

the intended recipient at the second e-mail address 

without the involvement of the sender. 

22. The method of claim 21, wherein the first ISP is a 
former ISP associated with the intended recipient and the 
second ISP is the current ISP associated with the intended 
recipient, 

23. The method of claim 21, wherein the EAMS database 
is Internet accessible and the query and query response are 
communicated via Internet messaging protocols. 

24. The method of claim 21, wherein a computer system 
associated with the EAMS autoforwards the e-mail message 
to the second e-mail address in response to receipt of the 
query response. 

25. The method of claim 21, wherein the query response 
containing the second e-mail address is provided by the 
EAMS in response to the query, and wherein a computer 
system associated with the sender automatically forwards 
the e-mail message to the second e-mail address in response 
to receipt of the query response. 

26. The method of claim 25, wherein the sender's ISP 
autoforwards the e-mail message to the second e-mail 
address in response to receipt of the query response „ 

27. The method of claim 21, further comprising steps for 
creating a new record in the EAMS database in response to 
receipt of an address change request from a consumer, 

28. The method of claim 27, further comprising the step 
of requiring predetermined authenticating information 
before creating a record in the database. 

29. The method of claim 28, wherein the authenticating 
information is obtained from an Internet accessible authen- 
ticating authority. 

30. The method of claim 28, wherein the authenticating 
information comprises a consumer authenticaton 

31. The method of claim 28, wherein the authenticating 
information comprises a merchant authenticator. 

32. The method of claim 22, wherein the EAMS database 
stores other predetermined information in association with 
the first e-mail address and the second e-mail address, such 
other information selected from the group comprising a 
consumer consent, consumer authentication, and merchant 
authentication, 

33 The system of claim 11, wherein the process for 
utilization in automatically re-transmitting the e-mail mes- 
sage to the second e-mail address comprises a program 
module in said computer system. 

34. The system of claim 11, wherein the process for 
utilization in automatically re-transmitting the e-mail mes- 
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sage to the second e-mail address comprises a program 
module in a computer system associated with the sender's 
ISP 

35, A method for managing e-mail address changes, 

5 comprising: 

providing a database of stored records in a cx)mputer 
system correlating a first e-mail address of an intended 
recipient of an e-mail message to a second e-mail 
address of the intended recipient; 

JO in response to a query from a sender's Internet service 
provider (ISP) associated with the sender of an e-mail 
message based on the first e-mail address of the 
intended recipient, accessing the database to determine 
whether the second e-mail address of the intended 
recipient is stored in association with the first e-mail 

^ address; 

in response to a determination that the second e-mail 
address of the intended recipient is stored in the data- 
base in association with the first e-mail address, retriev- 
ing the second e-mail address from the database as a 

"° response to the query; and 

communicating the query response to a process for utili- 
zation in automatically re-transmitting the e-mail mes- 
sage to the second e-mail address without the sender's 
involvement. 

25 36, The method of claim 35, wherein the first e-maii 
address is an invalid old address associated with a former 
Internet service provider (ISP) of the intended recipient and 
the second e-mail address is a new e-mail address associated 
with a new ISP of the intended recipient. 

30 37,, The method of claim 36, wherein the query is gener- 
ated by an Internet service provider (ISP) associated with the 
sender in response to receipt of a "message undehverable" 
message received from the former ISP when the e-mail 
message was sent to the first e-mail address. 

35 38, The method of claim 35, wherein the query and query 
response are communicated via Internet messaging proto- 
cols. 

39. The method of claim 35, wherein the process for 
utOization in automatically re-transmitting the e-mail mes- 
sage to the second e-mail address comprises a program 
module in a computer system associated with the database. 

40. The method of claim 35, wherein the process for 
utilization in automatically re-transmitting the e-mail mes- 
sage to the second e-mail address comprises a program 
module in a computer system associated with the sender's 

45 ISP 

41. The method of claim 35, further comprising the step 
of creating a new record in the database in response to 
receipt of an address change request from a consumer, 

42. The method of claim 44, wherein the step of creating 
50 the new record in the database includes obtaining predeter- 
mined authenticating information before creating a record in 
the database. 

43. The method of claim 42, wherein the authenticating 
information is obtained from an Internet accessible authen- 

55 licating authority. 

44. The method of claim 42, wherein the authenticating 
information comprises a consumer authenticator. 

45. The method of claim 42, wherein the authenticating 
information comprises a merchant authenticator. 

60 46, The method of claim 35, wherein the records of the 
database store other predetermined information in associa- 
tion with the first e-mail address and the second e-mail 
address, such other information selected from the group 
comprising a consumer consent, consumer authentication, 

65 and merchant authentication. 

sit * * * 
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[57] ABSTRACT 

Techniques for reducing the amount of junk e-mail received 
by a user of an e-mail system. A recipient description 
containing non-address information is added to an e-mail 
message. The user has an e-mail filter which has access to 
information which provides a model of the user. The e-mail 
filter uses the non-address information and the model infor- 
mation to determine whether the e-mail message should be 
provided to the user. The e-mail filter farther has access to 
information which provides models of the user's correspon- 
dents„ If the filter does not provide the message to the user, 
it uses the non-address information and the model informa- 
tion of the user's correspondents to determine who the 
message might be forwarded to. A sender of e-mail can also 
use the model infonnation of the sender's correspondents 
together with the non-address information to determine who 
the message should be sent to. The techniques arc used in a 
system for locating expertise. 
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MESSAGE FILTERING TECHNIQUES 

BACKGROUND OF THE INVENTION 

5 

1. Field of the Invention 

The invention concerns electronic messaging in general 
and electronic mail in particular. 

2. Description of the Prior Art 

A major annoyance in the conventional mail system is 
junk mail. As electronic mail has grown in availability and 
popularity, junk, electronic mail has become a problem as 
well. Indeed, the ease with which an e-mail message may be 
sent to many recipients may eventually make junk e-mail an 
even worse problem that junk conventional mail. 

The prior art has attempted to deal with the junk e-mail 
problem by means of mail filters in an e-mail recipient's 
local e-mail system. Such a filter sorts incoming e-maD for 
the recipient into categories determined by the recipient The ^ 
filter simply scans each e-mail message as it reaches the 
recipient and determines what category it should be placed 
in. One category is of course "discard". Messages which the 
filter places in that category are automatically discarded. 
Prior-art filters have had varying degrees of intelligence; ^ 
some have simply worked with lists of source addresses and 
have sorted according to the source of the message; others 
have used keywords provided by the recipient to sort; with 
others, finally, the filter observes how the recipient sorts his 
e-mail for awhile and is then able to sort in a similar fashion. 
For details about mail filters, see Peter W. Foltz and Susan 
T. Dumais, "Personalized information delivery: an analysis 
of information filtering methods", Communications of the 
ACM, vol. 35, no. 12, Dec., 1992, pp. 51-60; D. K. Gijfford, 
R. W. Baldwm, S. T. Berlin, J. M. Lucassen, "An architec- 
ture for large scale information systems", in Proceedings 
Tenth Symposium on Operating Systems Principles, (Orcas 
Island, Wash., Dec 1985), pp. 161-170; E. Lntz, H. V. 
Kleist-Retzow, and K Hoeming, *MAFIA~An active mail- 
filter agent for an intelligent document processing support", ^ 
in Multi-User Interfaces and Applications, S. Gibbs andn A. 
A. Verrijn>Smart, Eds, North Holland, 1990, pp. 16-32; T. 
W. Malone, K. R. Grant, R A„ Turbak, S. A. Browst, M. D. 
Cohen, ^Intelligent information sharing systems", Commuru 
ACM 30, 5 (May 1987) 390-402; S. PoUack, "A rule-based 
message filtering system", ACM Trans. Off. Inf Syst. 6, 3 
(July 1988), 232-254, E Maes, "Agents that Reduce Work 
and Information Overload", Commun. ACM 37 (7) (July 
1994), pp. 31-40. A problem with aU such filters is that 
sorting for another person is difBcult even for a human 
being, and if a filter is going to be useful, it cannot do much 
worse than a human would. 

One of the reasons for the junk mail is that present-day 
e-mail systems require that recipients be addressed by e-mail 
addresses. In order to ensure that an c-maO message will 55 
reach everyone who might possibly be interested in it, the 
sender typically uses a list of addresses which includes those 
who might be interested but includes many others as well 
For everyone but those actually interested, the e-mail is of 
course junk mail. 60 

What is needed to reduce the amount of junk mail is a 
technique which permits a sender to use something in 
addition to the e-mail address to specify the kinds of people 
who are to actually receive the e-mail and permits a filter to 
use the information provided by the sender to filter the mail 65 
so that only those kinds of people actually receive it. It is an 
object of the invention disclosed h^ein to provide such a 
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technique and thereby to reduce the amount of junk e-mafl 
received by a user of the e-mail system. 

SUMMARY OF THE INVENTION 

The invention reduces the amount of junk e-mail received 
by a user of the e-mail system by adding a recipient specifier 
to an e-mail message. The recipient specifier non-address 
information is used to further specify the recipients in the 
group to whom the message is sent who should actually 
receive the message. The mail filter for a given recipient has 
access to information about that recipient and uses that 
information together with the non-address information in the 
e-mail message to determine whether the message should be 
provided to the given recipient. If the non-address informa- 
tion and the information about the recipient indicate that the 
given recipient should not receive the message, the filter 
does not provide it. 

In another aspect of the invention, the sender's mail filter 
does the filtering. The sender provides a recipient specifier 
which uses non-address information to specify potential 
recipients to the mail filter. In this aspect, however, the 
sender's mail filter has access to information about the 
possible recipients and uses this information together with 
the non-address information to determine the potential 
recipients to whom the message should be sent. 

The first and second aspects of the invention are com- 
bined in a further aspect of the invention, namely a system 
for locating expertise in the e-mail system In this system, 
the sender specifies an area of expertise by means of a list 
of keywords which are relevant to the area. The list of 
keywords is included in a recipient specifier in the message. 
The mail filter for a potential recipient has access to the 
document files of the potential recipient and to a list of the 
e-mail messages sent and received by the potential recipient. 
The mail filter uses the document files to determine the 
recipient's areas of expertise. If the keywords in the recipi- 
ent specifier match one of the areas of expertise, the mail 
filter provides the e-mail message to the potential recipient; 
if not, the mail filter uses the list of e-mail messages to 
determine correspondents of the the potential recipient who 
may have the area of expertise specified in the recipient 
specifier and forwards the message to those correspondents. 
The mail filter of each potential recipient which actually 
provides the message to the recipient further sends a referral 
message io the sender of the message, who thus knows 
exactly who received the message. 

Other objects and advantages of the apparatus and meth- 
ods disclosed herein will be apparent to those of ordinary 
skill in the art upon perusal of the following Drawing and 
Detailed Description, wherein: 

BRIEF DESCRIPTION OF THE DRAWING 

FIG. 1 is a high-level block diagram of apparatus 
embodying the invention; 

HG. 2 is a diagram of user model 113 in a preferred 
embodiment; 

FIG, 3 is a diagram of correspondent models 111 in a 
preferred embodiment; 

and FIG. 4 is a diagram of data structures used by mail 
filter 109 in a preferred embodiment. 

Reference numbers in the Drawing have two parts: the 
two least-significant digits are the number of an item in a 
figure; the remaining digits arc the number of the figure in 
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which the item first appears. Thus, an item with the reference 
number 201 first appears in FIG. 2. 

DETAILED DESCREPTION OF A PREFERRED 
EMBODIMENT 

The following Detailed Description begins with an over- 
view of the invention and then describes in detail how the 
invention is implemented in apparatus to locate expertise in 
an e-mail system. 

Overview of the Invention: FIG, 1 
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HG. 1 shows a high-level overview of apparatus 10.1 
which embodies the invention. Apparatus 101 is employed 
in a network 103 which connects a number of users 105(a . 15 
. . n). Network 103 may be a network such as Internet or a 
conmiercial e-mail network, or it may be an e-maU system 
which communicates between users of a single computer 
system. Each user 105 is connected to network 103 by 
means of a link 107 over which user 105 can send and 20 
receive e-mail messages. A mail item of the type used in the 
invention is shown at 119; mail item 119 is a standard e-mail 
message except for two additional components: 

1. recipient specifier 121 which uses non-address infor- 
mation to further describe the recipients who should receive ^ 
the e-mail; and 

2n referral list 127, which is a list of potential recipients 
who passed the e-mail on and of recipients to whom the 
e-mail was provided. 

Recipient specifier 121 has two parts, recipient type field 
123, which generally indicates how recipient specifier 121 is 
to be interpreted, and recipient description 125, which 
contains the non-address infonnation which is actually used 
to determine whether mail item 119 is to be provided to a 
given recipient. 

A user 105 who wishes to reduce the amount of junk 
e-mail he receives has a mail filter 109 as part of his e-mail 
system. When an e-mail item 119 is sent to user 105's 
address, mail filter 109 interprets recipient specifier 121 to 40 
determine whether mail item 119 is to be provided to user 
105(n). In interpreting recipient specifier 109, mail filter 109 
employs user model 113, which is data that provides a model 
of user 105(n), If recipient description 125 specifies a 
recipient which is of the same kind as diat specified by user 45 
model 113, mail filter 109 adds mail item 119 to filtered mail 
115 and informs user 105(n) via interactive user mail 
interface 117 that mail has arrived. If user 105(n) desires, 
mail filter 109 can fiirther use the information in referral list 
127 to indicate the chain of referrals which resulted in the 50 
message being directed to user 105(n). In some embodi- 
ments, mail filter 109 may also use the infonnation in 
referral list 127 to send a receipt 129 which identifies the 
e-mail message, the chain of referrals, and user 105(n) to the 
original sender of mail item 119. 55 

If user model 113 does not specify a recipient which is of 
the same kind specified by recipient description 125, mail 
filter 109 looks to correspondent models 111 to determine 
where to send mail item 119. There is a correspondent model 
lll(m) for each of user 105(«)'s frequent correspondents, 60 
and like user model 113, each correspondent model lll(m) 
contains data which mail filter 109 can use together with 
recipient description 125 to determine which of user 
105(n)*s coixespondents should receive mail item 119. Mail 
filter 109 then adds the names and e-mail addresses of those 65 
correspondents to referral list 127 in mail item 119 and 
forwards mail item 119 to those correspondents. If they in 



tum have mail filters 109, they will also filter mail item 119 
as just described. In a preferred embodiment, user 105(n) 
may specify how much control he desires over forwarding. 
Forwarding may be completely automatic, or mail filter 109 
may present user 105(n) with the information firom recipient 
description 125 and a list of the correspondents it has ifbund 
for forwarding and let user 105(n) select which of the 
correspondents is to receive the forwarded letter. 

If user 105{n) wishes to send an e-mail message with a 
recipient specifier 121, user 105(n) makes that request of 
mail filter 109. Mail filter 109 uses interface 117 to obtain 
information from user 105(n) which it uses to make recipient 
specifier 121. Mail filter 109 then uses recipient specifier 
121 with correspondent models 111 in the manner described 
above to make a list of the correspondents who should 
receive the message. Depending on the implementation, 
mail filter 109 may simply send the e-mail message to those 
correspondents or permit user 105(72) to select correspon- 
dents from the list. The selected correspondents will of 
course be placed on referral list 127. In FIG. 1, mail filter 
109 and correspondent models lU and user model 113 are 
all implemented in the local computer system used by user 
105(n}. Such an implementation is advantageous in that the 
information in correspondent models 111 and user model 
113 remains imder the control of user 105(/z). In other 
embodiments, however, mail filter 109 may be located at any 
point in network 103. Indeed, some embodiments may 
contain only correspondent models 111. For example, a data 
base of customer information might be used as a correspon- 
dent model 111, and mail filter 109 might use recipient 
description 125 together with the data base of customer 
information to determine which customers should receive 
e-mail about a new product or service. 



A System for Locating Expertise 

The techniques described above are employed in a pre- 
ferred embodiment to make a system for locating expertise. 
The following discussion first explains the utility of such a 
system and then presents two different embodunents. 



Using a Computer to Find Information 

There are basically two ways of finding something out by 
using a computer: "ask a program" and "ask a person". 

The first covers all ways of accessing information stored 
online, including the use of traditional database programs; 
file indexing and retrieval programs such as glimpse (by Udi 
Manber at University of Arizona) or Apple's Apple-Search; 
news filtering programs such as Hoover (SandPoint Corp.); 
and even more simply, the use of tools such as ftp, awk, and 
text editors to retrieve and view files. 

The second, "ask a person", covers ways that a computer 
can be used as a communication medium between people. 
Currently the prime examples are electronic mail, including 
both personal e-mail and mailing lists, and bulletin boards 
and newsgroups. The growing integration of computers and 
telephones allows us to also view telephony as a computer- 
based commiunicadon medium. Simple examples of such 
integration are telephone address book programs that run on 
a personal or pocket computer and dial numbers for you; 
more sophisticated is the explosion in the use of computer- 
based FAX, Today it is hard to even buy a modem that does 
not have FAX capability, and by far ±e heaviest use of FAX 
is for person-to-person conmiunication. 
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There are inherent problems with botli general approaches 
to obtaining information. It has often been noted that as the 
world of online information sources expands, the "ask a 
program" approach suffers from the problem of Icnowing 
where to look. For example, the Mosaic system overcomes 5 
many of the technical problems in accessing a wide variety 
of information on the Internet, by automatically handling the 
low-level details of different conrnmnication protocols. It is 
easy and entertaining to browse through an enormous hyper- 
media space. However, finding an answer to a specific lo 
question using Mosaic tends to be slow and ftustrating, and 
often results in failure. One response to this problem has 
been the attempt to design systems that incorporate knowl- 
edge about the location of information, such as the Infor- 
mation Manifold project (by T. Kirk, A. Levy, and D. 15 
Srivastava, of AT&T Bell Labs). However, a deeper problem 
remains, that no solution based solely on building a better 
search-engine can address. This is the fact that much valu- 
able information is simply not online, but only exists in 
people' s heads. Furthermore, there are economic, social, and 20 
political reasons that much valuable information will never 
be made publicly accessible on the Internet or any other 
network, iideed, part of the value of a piece of information 
resides in the degree to which it is not easily accessible. 

In any large organization, detennming who is an expert on ^ 
a particular topic is a crucial problem. The need for expertise 
location ranges from informal situations, such as where I 
might need to find an expert on LaTex macros to help fix a 
typesetting problem in a paper I'm writing, to formal con- 
struction of project teams to meet business needs. The range 30 
of expertise specifications may range from the generic 
("who knows about logic programming?") to the highly 
specific ("who knows how to modify the interrupt vector 
handling microcode in the reboot module of the XZY999 
processor?"). 35 

Online directories of expertise rarely exist, and when they 
do, the information that contain is certain to be out of date 
and incomplete. In fact, expertise needs are potentially so 
specific that it is simply impossible to determine a compre- 
hensive set of categories in advance. Expertise location is 
therefore generally an "ask a person" task, with the all the 
problems associated with that approach outlined above. 

Let us consider for a moment how expertise location 
actually works when it is successful. In a typical case I 
contact a small set of colleagues whom I think might be 
familiar with the topic. Because each person knows me 
personally, they are quite likely to respond. Usually none of 
them is exactly the person I want; however, they can refer 
me to someone they know who might be. After following a 
chain of referrals a few layers deep I finally find the person 
I want 

Note that in this successful scenario I needed to walk a 
fine line between contacting too few people (and thus not 
finding the true expert) and contacting too many (and 55 
eventually making a pest of myself). Even in the end I might 
wonder if I might not have foimd even a better expert if only 
I could have cast the net a bit wider I may have had difficulty 
bringing to mind those people I do know personally who 
have some expertise in the desired area., If only all of my ^ 
colleagues employed endlessly patient assistants that I could 
have contacted initially, who would have known something 
about their bosses' areas of expertise, and who could have 
answered my initial queries without disturbing everyone. 

Now let us consider how mail filters could be used to 65 
augment the expert location process. Each p^son's mail 
filter would create a model of that person's areas of interest 



This model would be created automatically by using infor- 
mation retrieval QR) techniques (such as inverted indexes) 
on all the documents created and received by the user. The 
user model could be quite large and detailed, and would be 
private to the user, that is, not stored m a central database. 
The mail filter would also create a much more coarse- 
grained model of my contacts by applying similar tech- 
niques to all the electronic mail that I exchange with each 
person. 

When I have an expertise location need, I present the 
problem to my mail filter as an unstructured text description. 
Again using IR. techniques, my mail filter selects a medium- 
to-large set of my contacts to whom the query may be 
relevant™ It then broadcasts the query, not to the people 
themselves, but to their mail filters. Upon receipt of the 
question, each mail filter checks if its owner's user model 
does indeed provide a good match. If there is a good match, 
the mail filter presents my request to its owner. If the 
owner's model does not match, but the model of one of the 
owner's contacts does, then the mail filter can ask the owner 
if it can provide a referral. Finally, if there is no match at aU, 
the query is silently logged and deleted. A great deal of 
flexibility can be built into each mail filter, depending upon 
its owner's preferences. For example, I might allow auto- 
matic referrals to be given to requests that come firom my 
closest colleagues. 

This system provides several benefits over either sending 
personal e-mail to everyone in order to find an expert or 
using netnews to find the expert First, it is largely passive 
on the part of the recipients — they do not need to be reading 
netnews and wading through dozens of articles. Second, 
queries are broadcast in a focused marmer to those who are 
at least somewhat likely to find them of interest. Third, users 
are shielded firom seeing a large number of completely 
irrelevant messages; each maO filter 109 may process dozens 
of messages for every one the user sees. Finally, messages 
that a user does see do not come from "out of the blue", but 
rather are tagged with a chain of referrals from colleague to 
colleague. 

One reason to believe that the system just described 
would be usefijl in practice is that it basically models the 
manner in which expertise location actually works now (D. 
Krackhardt and J. R. Hanson, "Informal Networks: The 
Company Behind the Chart", Harvard Business Review, 
July- August 1993), while allowing more people to be con- 
tacted without causing disruption and disturbance. 

Implementation of an Expertise Locator 

A presently-preferred embodiment of the expertise locator 
has been implemented using the network agents described in 
Coen, et al., Network Agents, U.S. patent application Sen 
No. 08/203,147, filed Feb. 28, 1994 abandoned and contin- 
ued as U.S. Ser. No. 08/513.417, filed Aug. 10, 1995. In the 
implementation, mail filter 109 is a component of a user 
agent which handles e-maO messages for its user. Mail filters 
109 are written in the programming language Visual Basic, 
and run on a standard personal computer Interactive user 
mail interface 117 presents the expertise locator in mail filter 
109 to the user as an anthropomorphic "talking head" that 
appears in a window on the computer screen. All the 
computers running mail filters 109 are networked (currently 
using the protocol TCP/IP), and can exchange electronic 
mail with each other and with any person. A mail filter 109 
can also invoke other programs to perform various subtasks. 

Each mail filter 109 has access to two sets of data base 
files. The first set, shown in FIG. 2, implements correspon- 
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dent models 111; the second set, shown in FIG. 3, imple- 
ments user model 113. Each of the data base files in the two 
sets is specific to and owned by the individual'nser of mail 
filter 109. It is important to note that we do not assume that 
these files can be directly accessed by anyone other than the 5 
user and mail filter 109. 

Correspondent models 111 contains the following five 
files: 

Colleague list 201 which contains entries 203 for some of 
the user's colleagues^ Each entry 203 contains an identifi- 10 
cation 205 for the colleague and each a list of keywords 207 
describing the colleague's areas of expertise. 

An Email file 209 which contains all of the email 
211(0,.n) that the user has sent and received for a substantial 
period of time: typically, the past year or several years. 15 

An Email mverted index file 213 that has an entry 215 for 
each word that appears in any email message. Entry 215 
contains a word 217 and a list of the numbers of the 
messages in email file 209 that contain that word. This kind 
of file can be generated using standard information reuieval 20 
algorithms, such as those described in (G, Salton, Automatic 
Text Processing, Addison-Wesley 1989), 

A sender/recipient list file 221 that has an entry 223 for 
each message in email file 209„ The entry contains the 
identifier of the sender of the corresponding message (if 
other than the user) or the identifier of the recipient of the 
corresponding message (if sent by the user). 

FIG. 3 shows the data base files used to implement user 
model 113. 

User expertise list 301 is a file containing a list of 
keywords that describe some of the user's own areas of 
expertise. 

User files inverted index 305 is a file containing an 
inverted index of text files in the user's directory. That is, for 35 
every word that appears in any file the user has stored on the 
computer, this file contains a list of the names of the files 
containing that word. 

In the preferred embodiment, colleague list 201 and user 
expertise list 301 are created by mail filter 109 in interaction 40 
with user 105(n); the inverted index files 213 and user files 
inverted index 305 are created automatically by mail filter 
109. Hiis kind of very large inverted index can be quickly 
created and searched by the program "glimpse" (U. Manber 
and S. Wu, "GLIMPSE: A Tool to Search Through Entire 45 
File Systems," Usenix Winter 1994 Technical Conference, 
San Francisco (January 1994), pp. 23--32)„ In making 
inverted list 305, GLIMPSE uses a UNIX operating system 
(UNIX is a trademark of XOPEN) utility which determines 
whether a file is a text file. In addition, the user can specify 50 
to GLIMPSE which directories of files or individual files are 
to be indexed. 

A user begins the process of locating an expert in a topic 
by clicking on the window for mail filter 109 and typing a 
phrase that describes the general kind of request (such as, "I 55 
need to locate an expert"). Mail filter 109 then prompts the 
user for a phrase describing the area of expertise. Once this 
is done, mail fiher 109 generates and presents for approval 
a list of suggested candidates for receiving the request 

The list of candidates is generated by combining names 60 
from two sources. First, names are added that appear in 
colleague list 201, such that the words that appear in the 
phrase describing the expertise request appear in the list of 
keywords 207 associated with name 205. 

Second, names are added that result from the following 65 
computation. First, for each word that appears in the exper- 
tise request, mail filter 109 retrieves from email inverted 
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index file 213 a list of messages 403(0 . . . n) (HG. 4) 
containing that word. Next, the intersection of the lists is 
computed, generating a list of messages 405 each of which 
appears in every one of the previous iists„ Next, list of 
messages 405 is compared against sender/recipient list file 
221, and the total nimiber of messages that appear in list of 
messages 405 that are from each person in sender/recipient 
list 221 is calculated. The result is a name/message number 
pair list 407 of pairs of "person name" and "number of 
messages". Finally, list 407 is sorted according to "number 
of messages". The 20 names with the highest number of 
messages in this list are then added to the list of candidates. 

After the list of candidates has been approved by the user, 
mail filter 109 makes a recipient specifier 121 and adds it to 
the email message. Recipient specifier 121 contains a recipi- 
ent type request 123 which specifies that an expert is being 
requested and expertise description 401 is used as recipient 
description 125. 

The message travels through the network and arrives at 
the computer systems(s) of the recipients. Each recipient 
mail filter 109 notes recipient specifier 121 specifying that 
an expert is being requested, removes the e-mail message 
from the incoming mail stream, and processes it as follows: 

First, the words in expertise description 401 contained in 
the message's recipient specifier 121 are matched against the 
recipient's user experrise list 301. If the words appear in list 
301, then mail filter 109 assumes that this request is appro- 
priate for the recipient to see. 

If the words in the phrase do not match against the 
contents of user expertise list 301, mail filter 109 uses user 
files inverted index file 305 to match the phrase against the 
contents of all of the recipient's files which are indexed in 
file 305. This matching can be efficiently performed using 
the program "GLIMPSE" mentioned above. If the nimiber 
of matches is greater then a threshold number (e.g., more 
than 10 matches), the recipient's mail filter 109 determines 
that this request is likely to be appropriate for the recipient 

If the recipient's mail filter thus determines in either way 
that the message is appropriate, it uses user mail interface 
117 to make the the message appear on the recipient's 
computer screen. The recipient is then given the option of (i) 
respondmg afSmiatively back to the sender; (ii) responding 
negatively back to the sender; or (iii) referring the request to 
someone else. If this final option is selected, the recipient's 
mail filter 109 creates a list of candidate recipients as 
described above and the process is repeated. 

As is apparent from the foregoing description, the pre- 
ferred embodiment of the expertise locator increases its 
efficiency by using two-stage correspondent models 111 and 
user models 113. The first stage is the explicit descriptions 
of expertise contained in colleague list 201 and user exper- 
tise list 301; the second stage is the inverted indexes: 
inverted index 213 into email file 209 and inverted index 305 
into the the user's text files. The algorithms first use the 
expertise lists 201 and 301, and then they may in addition 
use the inverted indexes. 

EXAMPLE! 

Enhanced Yellow Page Service 

The general techniques described above can be applied to 
many different Mnds of tasks. The general approach is useful 
when die following conditions hold: 

1. You wish to contact a large number of people, without 
necessarily broadcasting messages to everyone in the worid. 
In the expertise location example, the user agent helped 
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determine a preliminary list of candidates based on a match- 
ing scheme. Other ways of determimng whom to send the 
message to are also useful. In the example below, the 
recipients are simply taken to be a fixed list of the sender's 
friends and colleagues. 

2. You want the message you send to only be seen by 
people to whom is it very likely to relevant, in order to avoid 
being disruptive. To that end,you want the message you send 
to explicitly indicate the conditions under which which it 
should be taken to be relevant Note that the computation of 
relevancy may rely on information thai is private to the 
recipient. In the previous example, the sender indicated the 
general conditions of relevancy by recipient type field 123 
(thus indicating the general kmd of processing to be per- 
formed by the recipient's mail filter 109) and the words in 
recipient description field 125 describing the kind of exper- 
tise required (thus providing the parameters to that process- 
ing). Another way of saying this is that the sender pro- 
activcly determines the general manner in which the 
message is to be em filtered. Note that this is different from 
earlier work on mail filtering, which always assumes that the 
recipient of a message is completely responsible for estab- 
lishing the conditions for filtering (if any), and the sender is 
completely "passive" with regard to filtering. 

We illustrate these core points with the following 
"Enhanced Yellow Page" service. The basic idea is to 
provide a service that assists people in obtaining one or more 
personal recommendations about a professional service or 
business. The system would work as follows. 

A customer contacts the Enhanced Yellow Page Service 
(EYPS) asking for a number of a particular service (e.g., a 
flower delivery service, an autobody shop, a roofer, etc.). 
The contact with the EYPS could be made by many possible 
means of coramimication, including telephone, an on-line 
service, an internet Mosaic/HTTP server, or electronic mail; 
alternatively, the EYPS software and directory could even be 
distributed to users and run entkely on their personal com- 
puters. 

The EYPS gives one or niore possible numbers. The 
customer can then ask the EYPS to help in obtaining one or 
more personal recommendations about the service or busi- 
ness. 

To obtain the recommendations, the EYPS fiarst considers 
people from a list of friends or colleagues of the customer. 
(One way to obtain this list is by simply asking the customer 
to register friends, family, or colleagues but there are also 
less intrusive ways of doing this, such as by keeping track 
of people with whom the customer frequently communi- 
cates.) 

Now, the key idea is that the EYPS does not simply 
contact every person on the list, but rather only contacts 
those people that have dealt with the particular service or 
business number in the last couple of months. There are at 
least two ways in which this kind of "sender pro-active 
filtering" can be done: 

1. The EYPS contacts maQ filter 109 for each friend or 
colleague, indicating the name and telephone number for the 
service for which a reconunendation is desired.. Mail filters 
109 that have been trusted with their owner's telephone 
records and/or records of business transactions can deter- 
mine whether their owner has dealt with that company. If so, 
they pass the request on to the owner. 

2. If the EYPS has direct access to the telephone records 
of the friends and colleagues (which is the case if the EYPS 
is implemented by a program running in a long-distance 
network itself), then it checks the phone records itself to 
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determine the list friends and colleagues that have called that 
company. 

Thus, instead bothering a large group of people, there is 
a careful screening to ensure that only those are contacted 
who have had some recent dealings with the particular 
service or business. There are various ways of how the 
EYPS can complete the process. The least intrasive way 
would be to simply leave a message with some of the 
selected people saying "Mr. or Ms. X would be interested in 
any opinion or recommendation about service Y. Please 
contact X at or leave message at number Z, This request 
expires at midnight". 

Note that this kind of "pro-active" mail filtering can also 
be implemented by having the user send a message directly 
to someone's mail filter 109. The message header would 
include a directive saying "pass on to user if he or she has 
contacted service X at least twice in the last three months." 
Upon receipt of the message, mail filter 109 will now filter 
the message based on the included directive. Again, note the 
difference with the current forms of mail-filtering, where 
filtering is under complete control of the recipient, and the 
sender does not give direct instmctions to the filtering 
program. 

Such a system naturally raises many privacy issues that 
can be addressed. For example, you may not necessarily let 
the person seeking the recommendation know who gets the 
request-for-advice message. That way, people would not feel 
obliged to respond. Also, the identify of the requester could 
be protected by simply having a message saying "A friend 
would hke an opinion or recommendation about service Y." 
In that case the EYPS would only reveal the identity of the 
requester once the recipient agrees to respond. 

Conclusion 

The foregoing Detailed Description has disclosed to those 
skilled in the computer and networking aits how non- 
address recipient information in an e-mail message and a 
mail filter which includes a model of the recipient may be 
used to reduce the amount of junk e-mail received by the 
recipient and how the non-address recipient information and 
a mail filter which includes models of the sender's corre- 
spondents may be used to reduce the amount of e-mail sent 
by a user. The Detailed Description has further disclosed 
how the above techniques may be used to construct an 
expertise locator and has disclosed the best mode presently 
known to the inventors for hnplementing the expertise 
locator. 

It wiU be immediately apparent to those skilled in the 
computer and networking arts that the principles of the 
invention may be used in any situation where a mail filter 
has access to information which enables it to respond to 
non-address information about the potential recipients of an 
e-mail message. It will be further apparent that many tech- 
niques may be used to construct models of the correspon- 
dents and recipients for use by the mail filters. The models 
may be simple lists of keywords, they may be inverted files, 
they may be data bases, or they may be any other arrange- 
ment of data which permits the mail filter to determine from 
the model and the non-address information whether the 
potential recipient should actually receive the message. It 
will further be apparent to those skilled in the art that the 
location of the man filter in the network is a matter of design 
choice. Filters which are located on the same computer 
system as the recipient have better access to recipient 
information, while those which are located closer to the 
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sender are more efiScient at reducing the total amount of 
network traffic. 

All of the above being the case, the foregoing Detailed 
Description is to be understood as being in every respect 
illustrative and exemplary, but not restrictive, and the scope s 
of the invention disclosed herein is not to be determined 
from the Detailed Description, but rather from the claims as 
interpreted according to the full breadth permitted by the 
law. 

What is claimed is: 10 

1. Apparatus for automatically limiting the recipients of a 
message sent via a mail system implemented in a computer 
system, the apparatus comprising: 

recipient specifying means in the message which uses 
non-address information to specify the recipients of the 
message; 

message filtering means in the computer system having 
access to recipient information contained therein about 
at least one potential recipient and including means 
responsive to the non-address information and to the 20 
recipient information for providing the message to the 
at least one potential recipient if the non-address infor- 
mation and the recipient information together indicate 
that the at least one potential recipient is to receive the 
message; and 

means, in the message filtering means, for sending a ^ 
referral message to a source of the message when the 
message filtering means provides the message to the at 
least one potential recipient. 

2. The apparatus set forth in daim 1 wherein: 

the referral message contains an identification of the at 
least one potential receipient 

3. The apparatus set forth in claim 1 wherein: 
the message is received by a plurality of users; 

the message includes information specifying the users 35 

who received the message; and 
the referral message further contains the information 

specifying the users who received the message. 

4. An arrangement for locating expertise in a messaging 
system implemented in a computer system, comprising: ^ 

first means, included in a message, for indicating, via 
non-address information, expertise sought by a sender 
of the message; 

second means in the computer system, for determining 
expertise of an addressee of the message; 45 

third means in the computer system responsive to receipt 
of the message, for determining whether the expertise 
indicated by the first means matches the expertise of the 
addressee determined by the second means; 

fourth means in the computer system responsive to a 
detennination by the third means that the indicated 
expertise matches the determined expertise, for provid- 
ing the message to the addressee, and responsive to a 
determination by the. third means that the indicated 
expertise does not match the determined expertise, for 
preventing the message from being provided to the 
addressee; 

fifth means in the computer system, for determining 
expertise of contacts of the addressee; 

sixth means responsive to a determination that the indi- 
cated expertise does not match the determined expertise 
of the addressee, for determimng whetiier the indicated 
expertise matches the expertise of any said contacts 
determined by the fifth means; and 55 

seventh means responsive to a determination by the sixth 
means that the indicated expertise matches the deter- 
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mined expertise of a contact, for sending the message 
to that contact 

5. The arrangement of claim 4 wherein: 

the second, third, and fourtii means are associated with die 
addressee. 

6. The arrangement of claim 4 wherein: 

the fifth and sixth means are associated with the 
addressee. 

7. The arrangement of claim 4 further comprising: 
eighth means responsive to a determination by the sixth 

means that the indicated expertise does not match the 
determined expertise of any contact, for discarding the 
message. 

8. The arrangement of claim 7 wherein: 

die eighth means are associated with the addressee. 

9. The arrangement of claim 4 wherein: 

the fifth means comprise 

means for analyzing messages exchanged by the sender 
with the contacts to determine therefrom the expertise 
of tiie contacts. 

10. The anangement of claim 4 further comprising: 
eighth means m the computer system responsive to the 

sixtii means determining tiiat the indicated expertise 
matches the determined expertise of a contact, for 
including referral information in tiie message to indi- 
cate tiiat tile message is being sent from tiie addressee 
to that contact. 

11., The arrangement of claim 4 wherein: 

the first means comprise 

means for conveying a list of keywords. 

12. An arrangement for locating expertise in a messaging 
system implemented in a computer system, comprising: 

first means, included in a message, for indicating, via 
non-address information, expertise sought by a sender 
of the message; 

second means in the computer system, for analyzing files 
of an addressess of the message to determine therefrom 
expertise of the addressee; 

third means in die computer system responsive to receipt 
of the message, for determimng whetiier the expertise 
indicated by tiie first means matches die expertise of the 
addressee determined by the second means; and 

fourth means in tiie computer system responsive to a 
determination by the third means that tiie indicated 
expertise matches the determined expertise, for provid- 
ing tiie message to tiie addressee, and responsive to a 
determination by the third means that the indicated 
expertise does not match tiie determined expertise, for 
preventing the message from being provided to the 
addressee. 

13. An arrangement for locating expertise in a messaging 
system implemented in a computer system, comprising: 

first means, included in a message, for indicating, via 
non-address information, expertise sought by a sender 
of the message; 

second means in tiie computer system, for determining 
expertise of an addressee of the message; 

third means in tiie computer system responsive to receipt 
of tiie message, for determining whetiier the expertise 
indicated by tiie first means matches tiie expertise of tiie 
addressee deteraiined by tiie second means; 

fourth means is in the computer system responsive to a 
detennination by the tiiird means that the indicated 
expertise matches the determined expertise, for provid- 
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ing the message to the addressee, and responsive to a 
determination by the third means that the indicated 
expertise does not match the determined expertise, for 
preventing the message from being provided to the 
addressee; 5 

fifth means in the computer system for analyzing mes- 
sages exchanged by the sender with potential recipients 
of the message to determine therefrom the expertise of 
the potential recipients; and 

sixth means in the computer system responsive to gen- 
eration of the message by the sender, for selecting 
addressees of the message from the potential recipients 
by matching the expertise sought by the sender with the 
expertise of the potential recipients detemimed by the 
fifth means. 

14. The arrangement of claim 13 further comprising: 
messaging means for sending the message to the selected 

addressees of the message. 

15. The arrangement of claim 13 wherein: ^ 
the fifth and sixth means are associated with the sender. 

16. An arrangement for locating expertise in a messaging 
system implemented in a computer system, comprising: 

first means, included in a message, for indicating, via 
non-address information, expertise sought by a sender 25 
of the message; 
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second means in the computer system, for" detenmning 
expertise of an addressee of the message; 

third means in the computer system responsive to receipt 
of the message, for determining whether the expertise 
indicated by the first means matches the expertise of the 
addressee determined by the second means; 

fourth means in the computer system responsive to a 
determination by the third means that the indicated 
expertise matches the determined expertise, for provid- 
ing the message to the addressee, and responsive to a 
determination by the third means that the indicated 
expertise does not match the determined expertise, for 
preventing the message from being provided to the 
addressee; and 

fifth means in the computer system responsive to the 
fourth means providing the message to the addressee, 

for sending a referral message to the sender to inform 
the sender that the message was provided to the 
addressee. 
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